Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Browse News Feed Stats Watchlists Beta About Contact

Tren de Aragua ATM jackpotting recruitment campaign

Campaign
First reported
Last updated
Happening score
H score 35
1 unique sources, 1 articles

Summary

Hide ▲

A Tren de Aragua (TdA) criminal campaign recruited people to deploy Ploutus malware against ATMs across the U.S., enabling coordinated cash theft at national scale. The activity matters because the operation combined recruitment, reconnaissance, and malware installation to turn ATM intrusions into repeated withdrawals.

Related Happenings

U.S. Treasury sanctions Kok An scam network

Regulatory/Legal Action
First: 04.05.2026 08:59 Last: 04.05.2026 08:59 Sources 1

About this happening: The **U.S. Treasury Department** sanctioned **Cambodian Senator Kok An** and affiliates tied to **cyber scam compounds**, escalating financial and legal pressure on a network accu...

Open Happening

UK FCDO sanctions Xinbi and #8 Park scam-centre network

Public Sector Action
First: 26.03.2026 17:42 Last: 26.03.2026 17:42 Sources 1

About this happening: On **2026-03-26**, the **UK FCDO** sanctioned **Xinbi**, a marketplace tied to **stolen data sales** and **crypto laundering** that supported scam centres in **Southeast Asia**. T...

Open Happening

UK Home Office and National Crime Agency Online Crime Centre launching the Online Crime Centre to crack down on fraud and disrupt cyber-criminal operations for Set to begin work

Public Sector Action
First: 09.03.2026 16:00 Last: 09.03.2026 16:00 Sources 1

About this happening: The **UK Home Office** and **National Crime Agency** are launching the **Online Crime Centre** to disrupt **cyber-criminal operations** and fraud at source. The unit, set to begin...

Open Happening

Tren de Aragua members charged in ATM jackpotting case

Law Enforcement
First: 20.02.2026 12:08 Last: 20.02.2026 12:08 Sources 1

About this happening: The U.S. Department of Justice charged **87 Tren de Aragua members** over the past **six months** in a case tied to **ATM jackpotting** and **Ploutus malware**. The charging actio...

Open Happening

FBI ATM jackpotting mitigation guidance

Advisory/Mitigation
First: 20.02.2026 10:05 Last: 20.02.2026 10:05 Sources 1

About this happening: The **FBI** has issued mitigation guidance for **ATM jackpotting**, aiming to reduce cash-out risk across deployed **ATM devices**. The recommendations focus on **physical securit...

Open Happening

Timeline

  1. 20.12.2025 15:48 1 articles · 5mo ago

    Related indictment returned on October 21, 2025

    Legal Policy Action Update

    A related indictment returned on October 21, 2025 charged 32 individuals with conspiracy to commit bank fraud, conspiracy to commit bank burglary and computer fraud, bank fraud, bank burglary, and damage to computers in connection with the ATM jackpotting activity tied to Tren de Aragua.

    Show sources
    Open in new tab
  2. 20.12.2025 15:48 1 articles · 5mo ago

    Second indictment returned on December 9, 2025

    Legal Policy Action Update

    An indictment returned on December 9, 2025 charged 22 people with bank fraud, burglary, and money laundering in a case prosecutors linked to ATM jackpotting activity carried out by Tren de Aragua.

    Show sources
    Open in new tab
  3. 20.12.2025 15:48 2 articles · 5mo ago

    DOJ announces Ploutus ATM jackpotting scheme

    Initial Disclosure

    The U.S. Department of Justice announced indictments of 54 individuals in a multi-million dollar ATM jackpotting scheme that used Ploutus malware to force automated teller machines across the U.S. to dispense cash; prosecutors said the operation tied to Tren de Aragua relied on recruited individuals to conduct reconnaissance, open ATM hoods, install the malware by hard-drive replacement or a removable thumb drive, issue unauthorized commands associated with the Cash Dispensing Module, and delete evidence of the malware deployment.

    Show sources
    Open in new tab