A Venezuelan national, Anibal Alexander Canelon Aguirre, believed to be the developer of the Ploutus ATM malware and a key figure in the Tren de Aragua criminal organization, has been arrested and charged with bank burglary, fraud, and money laundering conspiracy. The group used the malware to carry out ATM jackpotting attacks across 47 US states and foreign countries, forcing machines to dispense cash without debiting accounts. Canelon Aguirre, who had been on the FBI's top 10 most wanted list since March 2026, pleaded not guilty and will remain detained pending trial, as part of a broader case involving 120 charged defendants.
