Tren De Aragua is a transnational criminal organization originating in Venezuela known for large-scale organized crime.
Tren De Aragua is a organization tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed December 19, 2025; most recent activity June 17, 2026.
Tren De Aragua is a transnational criminal organization originating in Venezuela known for large-scale organized crime. In a recent report, it is accused of deploying the Ploutus ATM malware to carry out jackpotting operations across the United States, signaling a significant cyber-enabled cash-out capability by a criminal network. The case highlights the cross-border threat posed by bank-targeting malware used by organized crime.
On June 12, 2026, a US drone strike in Bolívar state, Venezuela, killed Hector Rusthenford Guerrero, known as 'Niño Guerrero,' leader of the Tren de Aragua gang. This strike marks a significant escalation in US military…
A Venezuelan gang, linked to Tren de Aragua, has been charged with deploying Ploutus malware on ATMs across the United States. This operation has allegedly siphoned millions of dollars illegally, with US officials…
Tren De Aragua is a transnational criminal organization originating in Venezuela known for large-scale organized crime.
The most recent intelligence report mentioning Tren De Aragua on ThreatCluster is dated June 17, 2026. Activity was first observed December 19, 2025, giving a tracked span from then to June 17, 2026.
Across ThreatCluster reporting, Tren De Aragua most frequently co-occurs with Malware, Operation Southern Spear, Jalisco New Generation Cartel, Bolivia, Colombia, among 8 tracked related entities.
The most significant recent cluster is “US Drone Strike Kills Venezuelan Gang Leader, Escalates Regional Security Tensions” (2 articles · Updated June 19, 2026). Tren De Aragua appears across 2 threat clusters in total, listed above with sources.
Tren De Aragua appears in 2 intelligence report mentions across 2 deduplicated threat clusters, aggregated from 17,000+ monitored sources.