Alleged Ploutus ATM Malware Developer Appears in U.S. Court After Arrest
Summary
U.S. authorities arrested Anibal Alexander Canelon Aguirre, accused of developing Ploutus malware used in ATM jackpotting attacks that stole more than $5.4 million from U.S. banks and credit unions.
Key points
- Canelon Aguirre is accused of developing Ploutus and leading an ATM jackpotting conspiracy.
- Court documents say the attacks targeted banks and credit unions from February 2024 through December 2025.
- The attacks stole more than $5.4 million across at least 63 incidents; additional attempted attacks involved $1,429,738.
- Authorities say stolen funds were laundered and transferred to accounts linked to the Tren de Aragua gang.
- Canelon Aguirre faces federal charges including bank fraud, money laundering, and conspiracy to provide material support to terrorists.
- Since October 2025, the Justice Department has charged 98 suspects in TdA-linked ATM jackpotting schemes.
Article Details
- Event Type
- Arrest and criminal case involving the alleged developer of Ploutus ATM malware
- Impact
- Ploutus was allegedly used in ATM jackpotting attacks against U.S. banks and credit unions. Authorities report more than $5.4 million stolen across at least 63 attacks on banks and 54 attacks on credit unions, plus $1,429,738 in attempted attacks. The article also reports that stolen funds were laundered and transferred to accounts controlled by Tren de Aragua.