Be alert for text message scams which attempt to hack your Duo Two-Factor Authentication (2FA) account in order to gain access to your Penn State account.
The scam operates with the hacker sending a text message requesting a DUO authorization code to access your Duo profile. If they receive that code, the hacker can then add their device to your account. This enables them to receive 2FA push notifications or even push Duo notifications for you to accept.
To learn more about these types of scams and how to avoid them, see Penn State Alerts Community to Two-Factor Authentication Scams.
If you think you may have already replied to a fraudulent text message, contact Penn State's Office of Information Security (OIS).