Ploutus Malware - GoKawiil

DOJ arrests alleged Ploutus ATM malware developer tied to Tren de Aragua

The Justice Department announced the arrest of Anibal Alexander Canelon Aguirre, 50, allegedly the developer of Ploutus ATM jackpotting malware and a leader of the criminal network behind it. Prosecutors say the scheme stole over $5.4 million from banks and credit unions between February 2024 and December 2025, with proceeds laundered through accounts linked to the Venezuelan gang Tren de Aragua. He was charged in Nebraska in December 2025 with conspiracy to commit bank fraud and money laundering.

bleepingcomputer.com · 2026-10-05

Treasury sanctions eight Tren de Aragua members over ATM jackpotting scheme

The U.S. Treasury Department has sanctioned eight members of the Venezuelan gang Tren de Aragua for running ATM jackpotting attacks that drained millions of dollars from machines across the United States using malware such as Ploutus. The group is led by Anibal Alexander Canelon Aguirre, alias 'Prometheus,' an FBI Ten Most Wanted fugitive accused of developing the Ploutus malware, alongside six named associates. OFAC also blacklisted seven TRON cryptocurrency addresses linked to roughly $6.1 million in stolen funds.

bleepingcomputer.com · 2026-10-02