IT Advisory: MFA and SMS/Text Notification

From USI IT Security: 

In higher education, hackers are continuously trying to break into our systems. Cybersecurity is something we are all getting more familiar with, but sometimes that’s not enough to stop the threat actor.  In IT Security, we are seeing more threat actor attacks on SMS/text messages—from threat actors asking for your cell phone number in phishing emails to SMS phishing emails where the threat actors attempt to obtain your MFA code. To stay in front of these threat actor attempts, we are making a shift in the preferred methods for Multifactor Authentication (MFA).

IT Security recommends the following methods for MFA second factor:     

Okta Verify

If you have a smartphone, the easiest way to use MFA is with the Okta Verify app which you can download from the Apple or Android store. If you don’t have a smartphone or prefer not to download an app, you can configure MFA to send you a text message, or you can configure it to call your phone. Once you have this setup, we recommend you configure a second option as well so you have more than one way to satisfy the MFA requirement.  

Okta Verify USB Security Keys

If a cell phone is not an option for your multifactor device, you can purchase a USB security key, which looks like a small flash drive. These will require a small one-time fee charged to your department (and your financial manager's approval).  If you are interested in this option, please contact the IT Service Desk for more information.

Google Authenticator

Similar to Okta Verify, Google Authenticator adds an extra layer of security to your online accounts by adding a second step of verification when you sign in. This means that in addition to your password, you'll also need to enter a code that is generated by the Google Authenticator app on your phone.

More information can be found in our knowledge base located at services.usi.edu. If you need additional assistance contact the Service Desk at 812-465-1080.