On June 3rd, 2019 two-factor authentication will become mandatory to access many IT services while off campus or using the wireless network. This provides a much greater level of protection for your personal information and the information of other Wright State members.
While two-factor authentication provides a greater level of security, it is not a universal remedy. The 'bad guys' have developed social engineering techniques to defeat two-factor authentication. Please note that they are not attacking the technology with these techniques, but are targeting the individual's willingness to be helpful.
One example goes like this (this technique only works if an individual has already mistakenly given their username and password away via a phishing scam): when the username and password are in possession of the 'bad guys'. an email is sent to the individual masquerading as the company's IT Help Desk. This email indicates the IT department will be testing the two-factor authentication system, requesting that the individual approves the request. If the user approves the request, the hacker now has access to the person's account.
The lesson here is to never approve a two-factor authentication request unless you are the person authenticating to our systems.
If you have any questions about two-factor authentication, or ever receive an email you believe to be suspicious, contact the CaTS Help Desk at (937) 775-482, or email helpdesk@wright.edu.
