DUO - Unexpected Duo Login Alert

Context: 

If you receive a login request for approval on the DUO Mobile app that you did not personally request, your CMC account has been compromised. The user attempting to login to your account would not be able to continue without further approval using the DUO authentication process.

Procedure: 

When you receive an unexpected DUO request, follow these steps immediately:

1.    Change your CMC account password – this will stop the alerts going to your smartphone.  You can reset your CMC password using the CMC Self-Service Account Management service.

2.    Launch the Duo Mobile app from your smartphone. 

Tap on the Request Waiting section.

Duo Mobile app interface: With “1 Request Waiting. Tap to Respond” banner visible and arrow pointed to it and Duo-Protected Claremont McKenna College block underneath

On the next screen, note the location where the account is being accessed. 

If the location is not familiar, this is an indication that someone has your username and password.

Tap on the Deny button.

Duo Mobile app interface: Approve/Deny Login request powered by Duo Security coming from the CMC CAS service with user “ASmith”, IP Address: 123.456.789.01 in Istanbul, TR. at 12:12:23 P.M. PDT on June 25, 2019 with arrow pointing to Deny

Then, select It seems fraudulent to stop the login.

Duo Mobile app interface: “Why are you denying this request” prompt with red band-box over “It Seems Fraudulent” with other choice “It Was a Mistake” and Cancel button

3.    Report the incident to the Help Desk.

Phone:  (909) 607-0911
On campus extension: x70911
Campus location:  Roberts South, Lower Level (RS012)
Email: help@cmc.edu