GoKawiilDOJ arrests alleged Ploutus ATM malware developer tied to Tren de Aragua
The Justice Department announced the arrest of Anibal Alexander Canelon Aguirre, 50, allegedly the developer of Ploutus ATM jackpotting malware and a leader of the criminal network behind it. Prosecutors say the scheme stole over $5.4 million from banks and credit unions between February 2024 and December 2025, with proceeds laundered through accounts linked to the Venezuelan gang Tren de Aragua. He was charged in Nebraska in December 2025 with conspiracy to commit bank fraud and money laundering.
GoKawiil's interpretation of the reporting above, not reported fact.
The case illustrates how ATM jackpotting malware has evolved to include anti-forensic features designed to evade detection by financial institutions, according to the DOJ. The alleged ties to Tren de Aragua suggest cybercrime proceeds may be funding or intersecting with organized transnational criminal networks, which could intensify law enforcement scrutiny of financial-sector malware cases.
- Canelon Aguirre allegedly developed Ploutus malware used in dozens of ATM jackpotting attacks.
- Prosecutors say over $5.4 million was stolen with additional attempted losses nearing $1.4 million.
- Laundered funds were allegedly funneled to accounts controlled by the Tren de Aragua gang.
Source: bleepingcomputer.com, 2026-10-05
Published there as: “Alleged dev of Ploutus ATM malware appears in US court after arrest”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.