Rescana

ATM Jackpotting: Tren de Aragua Gang Sentenced for Ploutus Malware Scheme

First seen 26 Jan 2026, 02:43 UTC • Rescana

•35.4

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

In January 2026, U.S. federal authorities sentenced two Venezuelan nationals, Luz Granados and Johan Gonzalez-Jimenez, for their involvement in a multi-state ATM jackpotting scheme. The attackers exploited older-model ATMs using Ploutus malware to bypass security protocols and steal cash, affecting financial institutions across the southeastern United States.

How this analysis works

Attack Flow

12 entities, 10 inferred relationships (STIX 2.1).

Technique (6)

Malware
Defense Evasion
Execution
Impact
Initial Access
Persistence

Organization (1)

Tren De Aragua Gang

Malware (1)

Ploutus

Affected Platform (1)

Windows XP

Tool (3)

Laptop
Lock-picking Tools
USB Thumb Drive

Relationships

Ploutus targets Tren De Aragua Gang
Malware targets Windows XP
Defense Evasion targets Windows XP
Execution targets Windows XP
Impact targets Windows XP
Initial Access targets Windows XP
Persistence targets Windows XP
Ploutus related to Laptop
Ploutus related to Lock-picking Tools
Ploutus related to USB Thumb Drive

Continue Reading

NgCERT Warns of $2 Million ATM Cash-Out Cyberattack on UBA Senegal FBI Arrests Venezuelan Nationals in $529K Interstate ATM Jackpotting Scheme Venezuelan Nationals Sentenced for ATM Jackpotting Scheme Linked to Tren de Aragua Five Venezuelans Plead Guilty in ATM Jackpotting Scheme 54 Charged in U.S. DOJ ATM Jackpotting Scheme with Ploutus Malware ATM Jackpotting Leads to $20M Theft via Malware

ATM Jackpotting: Tren de Aragua Gang Sentenced for Ploutus Malware Scheme

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading