Reminder: Don’t approve a Duo push unless you initiated it

Never approve a Duo Mobile push on your phone that you didn’t initiate. If you aren’t actively trying to log into a WVU system, the prompt may mean that someone else is trying to hijack your account. Once in, they can change your Login password, lock you out, add devices to your Duo account and use that access to scam others.

Recent phishing attempts have been increasingly sophisticated, with bad actors in one case creating links to fake versions of the WVU Login and Duo screens. People were prompted to enter a Duo passcode, which the criminals quickly captured to compromise those accounts. The criminals then used those accounts to send tens of thousands of additional phishing emails.

Faculty, staff and students should never share their Login passwords or Duo account access with anyone, including partners and parents. Parents can look at student accounts, pay bills and view grades when granted access through the Parent/Guest Portal.

Learn more about protecting yourself at defendyourdata.wvu.edu.