http://www.af.mil/news/story.asp?id=123046045 By Carmen L. Gleason American Forces Press Service 3/23/2007 WASHINGTON (AFNEWS) -- Defense Department officials have launched an investigation into recent computer hackings of servicemembers' home computers that compromised personal information and led to the redirection of funds from their military pay accounts. Over the past eight months, nearly two dozen Defense Finance and Accounting Service "myPay" participants have had their accounts accessed by unauthorized personnel, officials said. The myPay program allows DFAS users to manage pay information, leave and earnings statements and W-2s online. The compromise likely came from personal information being stolen from home computers via spyware and keystroke-logging viruses, DFAS officials said. A hacker redirected one servicemember's pay to a credit card vendor by changing account information the day before pay day, said Tom LaRock, DFAS spokesman. However, he added, DFAS quickly worked with his bank to have funds returned to his account within two days. When suspicious activity is detected under the current system used by DFAS, LaRock explained, financial institutions are immediately notified so reversals can be made to servicemembers' accounts. DFAS plans to launch a new program soon that will increase the ability to detect unauthorized changes prior to processing by pay systems. This will make the system for myPay's 3.7 million users even more responsive, LaRock said. "This won't completely stop compromises," he said, "but it will help alert us more quickly so appropriate actions can be taken." Key-logging software often is installed on systems when an individual simply views e-mails or clicks links that look and seem like reputable sites. Hackers then are able to detect passwords and other personal information, DFAS officials said. The organization is reminding customers that they have a responsibility to take measures to protect their personal information from scams and identity theft. DFAS warns that a variety of methods can be used to attack home computers, including phishing, malicious software and outside takeovers via bad software configurations. Users are encouraged to install and continually update anti-virus and firewall software. DFAS offers tips for security and protection to its users on its Web site, https://mypay.dfas.mil/PersonalData.htm The Defense Department also offers free downloads of antivirus and firewall software programs to servicemembers and civilians under terms of the DOD enterprise antivirus license with supporting companies. [Non-text portions of this message have been removed] -------------------------- Want to discuss this topic? Head on over to our discussion list, [EMAIL PROTECTED] -------------------------- Brooks Isoldi, editor [EMAIL PROTECTED] http://www.intellnet.org Post message: [email protected] Subscribe: [EMAIL PROTECTED] Unsubscribe: [EMAIL PROTECTED] *** FAIR USE NOTICE. This message contains copyrighted material whose use has not been specifically authorized by the copyright owner. OSINT, as a part of The Intelligence Network, is making it available without profit to OSINT YahooGroups members who have expressed a prior interest in receiving the included information in their efforts to advance the understanding of intelligence and law enforcement organizations, their activities, methods, techniques, human rights, civil liberties, social justice and other intelligence related issues, for non-profit research and educational purposes only. We believe that this constitutes a 'fair use' of the copyrighted material as provided for in section 107 of the U.S. Copyright Law. If you wish to use this copyrighted material for purposes of your own that go beyond 'fair use,' you must obtain permission from the copyright owner. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/osint/ <*> Your email settings: Individual Email | Traditional <*> To change settings online go to: http://groups.yahoo.com/group/osint/join (Yahoo! ID required) <*> To change settings via email: mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
