Treasury Blacklists Most-Wanted ATM Malware Developer and His Network
US Treasury sanctioned alleged Ploutus ATM-malware developer Anibal Canelon Aguirre and associates tied to Tren de Aragua.
The US Treasury’s OFAC sanctioned Anibal Alexander Canelon Aguirre, known as Prometheus, whom it calls the engineer of malware used in ATM jackpotting attacks linked to Tren de Aragua. OFAC also designated seven alleged associates and two Mexico-based companies; the network, based in Mexico and Venezuela, targets US ATMs. Treasury said more than 1,500 jackpotting attacks had caused over $40 million in US losses as of August 2025. The Justice Department has indicted 119 people, and several defendants have received federal sentences of 78 to 96 months.
66