Cybersecurity Awareness Month Tip - MFA Fatigue Attacks

Duo MFA Fatigue Attacks: Stay Alert, Stay Secure

Multi-factor authentication (MFA) is a crucial security measure, but it's not immune to attacks. Be aware of "MFA fatigue attacks" where hackers exploit user behavior to gain unauthorized access. Fairfield University uses Duo to manage our MFA - consider it for personal accounts too.

How It Works:

• Attackers use stolen credentials to repeatedly attempt logins
• Each attempt triggers an MFA request to your device
• They hope you'll eventually approve out of frustration

Protect Yourself:

1. Never approve unexpected requests
2. While MFA is valuable, it's not infallible. Report suspicious activity to itsecurity@fairfield.edu or contact the ITS Help Desk ASAP at (203) 254-4069.
3. Change your password if you receive unusual MFA prompts
4. Act fast if you accidentally approve a request; contact ITS immediately

Best Practices:

• Prefer verified push notifications over text or calls when available
• Always opt for MFA on personal and work accounts