The users of a retirement savings and investment plan for federal employees were targeted by keyloggers last month, with cybercriminals making off with about $35,000 from user accounts.