538/68 Monday, December 22, 2025
The U.S. Department of Justice (DoJ) has announced criminal charges against 54 individuals involved in a nationwide ATM jackpotting scheme that caused millions of dollars in losses. Investigators have linked the operation to the transnational criminal organization Tren de Aragua (TdA). The defendants face multiple charges, including fraud, money laundering, and providing material support to a terrorist organization. If convicted, some defendants could face sentences ranging from 20 years to as much as 335 years in prison.
ATM jackpotting is a technology-enabled bank robbery technique in which attackers gain access to the internal systems of ATMs by physically opening the machines, connecting external devices, or replacing hard drives. They then install malware that forces the ATM to dispense cash without authorization. One of the malware families used in these attacks is Ploutus, which is designed to directly control the cash dispensing module. The malware can also erase installation traces to conceal evidence of the attack. Once the cash is released, the perpetrators quickly collect the money and flee the scene, often without triggering immediate alarms.
U.S. authorities stated that among those charged is Jimena Romina Araya Navarro, believed to be one of the leaders of Tren de Aragua. Investigators allege that proceeds from the ATM thefts were laundered and used to finance broader criminal and terrorist activities. The case is part of a coordinated effort under the Homeland Security Task Force, bringing together federal, state, and local law enforcement agencies to dismantle transnational criminal networks. Officials emphasized that the operation demonstrates the effectiveness of interagency cooperation in tracing financial flows and reaffirmed that the United States will not serve as a safe haven for such criminal organizations.
Source https://securityaffairs.com/185908/cyber-crime/atm-jackpotting-ring-busted-54-indicted-by-doj.html
