Key loggers cause problems for DFAS users Published April 6, 2007 By Staff Sgt. Christopher Frost Nucleus Editor KIRTLAND AIR FORCE BASE, New Mexico -- People with too much time who own computers have caused problems since personal computers became household staples. These computer users take time to create viruses, hack Web sites and other computers, and find ways to put key loggers on personal computers. These key loggers track key strokes and can send the hacker sensitive information such as user names, passwords and even social security numbers. Users of myPay, the Defense Finance and Accounting Service program where Airmen can manage their pay information, have begun to fall victim to key loggers. Users who have had their accounts compromised have noticed unauthorized electronic funds transfer changes, said 1st Lt. Irene Cusack of the 377th Comptroller Squadron here. DFAS is developing a program to increase its ability to identify these types of unauthorized changes prior to payments actually being processed by the pay systems, said the lieutenant. This program is set to be implemented in May. While this program will not guarantee that 100 percent of the attacks will be stopped, it will stop government funds from being taken in many of the cases. Key loggers are nothing new and can be present on home computers that are used by myPay users, which is how the passwords are compromised, said Lieutenant Cusack. However, there are also other ways that hackers can get sensitive information such as viruses, phishing and other exploits. The problem is not caused by a fault in the myPay Web site, said Lieutenant Cusack. Instead, users are often getting their information stolen through methods that can be prevented. To protect themselves immediately, users should install antivirus and firewall programs on their computer and keep them updated. These programs are offered free of charge to government employees and should be used, said Lieutenant Cusack. She also urges users not to use public computers such as those found in Internet cafes to access Web sites that contain sensitive information such as myPay. Users who believe that their myPay account has been compromised should visit the 377th Comptroller Squadron's customer service window as soon as possible.