U.S. DOJ Charges 54 in ATM Jackpotting Scheme Using Ploutus Malware

"Another 32 individuals have been charged in a second, related indictment returned on October 21, 2025, accusing them of "one count of conspiracy to commit bank fraud, one count of conspiracy to commit bank burglary and computer fraud, 18 counts of bank fraud, 18 counts of bank burglary, and 18 counts of damage to computers." If convicted, the defendants could face a maximum penalty of anywhere between 20 and 335 years in prison."

"In July 2025, the U.S. government announced sanctions against the group's head, Hector Rusthenford Guerrero Flores (aka Niño Guerrero), and five other key members for their involvement in the "illicit drug trade, human smuggling and trafficking, extortion, sexual exploitation of women and children, and money laundering, among other criminal activities." The Justice Department said an indictment returned on December 9, 2025, has charged a group of 22 people for supposedly committing bank fraud, burglary, and money laundering."

The Department of Justice indicted 54 people for a multi-million dollar ATM jackpotting scheme that deployed Ploutus malware to force ATMs to dispense cash. Prosecutors allege many defendants are members or associates of Tren de Aragua (TdA), a Venezuelan gang designated as a Foreign Terrorist Organization. The U.S. sanctioned TdA leaders in July 2025 for involvement in drug trafficking, human smuggling, extortion, sexual exploitation, and money laundering. Indictments returned in October and December 2025 charge individuals with bank fraud, bank burglary, computer damage, and related conspiracies. If convicted, defendants face between 20 and 335 years in prison.

Read at The Hacker News