A group of five Venezuelan nationals has pleaded guilty to attempting to use malware to drain cash from ATMs across the United States. The brazen heists, known as “jackpotting” attacks, have been on the rise in recent years, with criminals using sophisticated malware to take control of ATM internal computers and issue commands to dispense large sums of money.
The five defendants, aged between 26 and 33, targeted ATMs in several states, including Kansas, where they were caught attempting to install malware in December 2025. The attempts were foiled by surveillance cameras, which captured the would-be thieves’ efforts to empty the cash storage cassettes. One of the defendants, Luis Alberto Velasquez-Artigas, has already been sentenced to nine months in prison.
These types of attacks are not new, and the malware used is often complex and designed to evade detection. The Justice Department has warned that ATM jackpotting incidents have surged in recent years, with over $20 million stolen last year alone. In fact, a wave of arrests targeting members of the Tren de Aragua Venezuelan criminal organization has led to charges against 87 individuals, who face maximum prison terms ranging from 20 to 335 years each.
The malware used in these attacks is often installed using an attached USB keyboard or the built-in PIN pad on the ATM’s internal computer. Once inside, the attackers can issue commands to dispense cash and empty the money storage cassette. The technology used to thwart such attacks is available, but it requires investment from banks and financial institutions.
The U.S. Attorney’s Office has encouraged these institutions to take steps to prevent jackpotting attacks by investing in security updates that can detect and block malware attempts. “Jackpotting bandits are sweeping the nation,” said U.S. Attorney Ryan A. Kriegshauser. “Fortunately, there is technology to help thwart jackpotting.”
The success of these attacks highlights the importance of robust cybersecurity measures for financial institutions. As the Justice Department has demonstrated in recent cases, law enforcement agencies are taking a tough stance against those involved in ATM jackpotting schemes.
In practical terms, this means that banks and financial institutions need to be vigilant about updating their security systems and investing in technologies that can detect and block malware attempts. By doing so, they can prevent such brazen heists from occurring in the first place.
Source: Bleeping Computer — 2026-09-01