Beware of Multi-factor Authentication Phishing

Photo by Richard Patterson on Flickr. Available under a Creative Commons Attribution license.

City Tech has been made aware of phishing tactics to deceive students for the multi-factor authentication (MFA) codes.

Attackers will attempt to trick users into revealing their login credentials or authentication codes, through emails, text messages, or websites that mimic legitimate services.

Be aware that no one at CUNY will ask for your MFA code and no one should ever approve a MFA prompt they did not initiate.

If you have been contacted to reveal your MFA code or login credentials, please report these to the Office of Computer Information Services.

STUDENT IT HELP DESK
StudentHelpdesk@citytech.cuny.edu
718-260-4900
Library Building (L-114)

FACULTY/STAFF HELP DESK
Helpdesk@aleonard718-260-5626
NAMM Building (N-901)

You can recognize MFA phishing attempts by looking out for:

  • Unexpected requests
  • Poor grammar and spelling
  • Suspicious links
  • Urgent language
  • Unfamiliar senders