Since the implementation of multifactor authentication (the extra step beyond your username and password that requires you to "approve" the login request), attackers are now attempting to get users to bypass this security layer by MFA "bombing" also known as "prompt bombing".    If an attacker gets access to your SU username and password, they could send DUO requests, or even multiple simultaneous DUO approval requests to your device in an attempt to get you to just "approve" the requests to stop the requests from coming.

SU employees should never approve a DUO request that was not initiated by you to login to SU systems.

If you receive any or many simultaneous DUO approval requests that you did not initiate, please contact the IT Help Desk at 410-677-5454.  The issue will be reported to our security team to investigate.