The Covid Test email has an attachment named “Covd test Result.htm” that takes you out to a fake WebAccess page.
Webaccess has been deprecated since July 7, 2021. Any web site that presents a Webaccess login page may be a phishing site and should be reported to security-tier1@psu.edu.
Please see this article for more information: https://www.psu.edu/news/administration/story/new-penn-state-sign-replaces-webaccess/.
After authenticating to the attackers page, a scammer’s fake Duo page will appear asking you to enter a passcode. Afterward, you’ll be asked to enter a SECOND Duo passcode.
Unlike our real Duo prompts, this fake Duo page has the option for Duo passcodes (it doesn’t offer the options for “Send Me a Push” or “Call Me”). If you don’t see options to call you or send a Duo push, it is a fake page!!! Also, after you enter a passcode the first time the attacker presents a page saying that your first code was invalid and asks you to re-generate and enter a new passcode. Penn State will never ask you to enter a second Duo passcode!