The US Treasury announced on 2 October that it had designated eight members of the Venezuelan gang Tren de Aragua (TdA) for their role in ATM jackpotting attacks that stole millions of dollars from bank and credit-union automated teller machines across the United States. Jackpotting deploys malware — including ATMii, ATMitch, GreenDispenser, Alice, RIPPER, Skimer, SUCEFUL and Ploutus — from an attached USB keyboard or built-in PIN pad to empty machines of cash and delete the evidence. The designated list includes Anibal Alexander Canelon Aguirre (alias "Prometheus"), who has allegedly developed the Ploutus malware and has been on the FBI's Ten Most Wanted Fugitives list since March, and six associates. Treasury said the scheme is based in Mexico and Venezuela, targets US ATMs, and launders stolen funds to TdA members in various countries. The action is part of a whole-of-government campaign that has produced more than 30 actions against more than 300 individuals and entities tied to transnational criminal organisations since 2025; the Treasury also added seven TRON addresses to its Specially Designated Nationals list, which received roughly US$6.1 million since March 2022.

• Source article