A High-Profile Arrest Shakes Up the Cybercrime Scene as Alleged Developer of Ploutus Malware Faces Justice
In a major blow to transnational cybercrime, Anibal Alexander Canelon Aguirre, known online as “Prometheus” and “The Engineer,” has been arrested in connection with developing and deploying the notorious Ploutus malware. The 50-year-old is alleged to have led a conspiracy that exploited ATMs across the United States, resulting in losses of over $5.4 million.
According to court documents, Canelon Aguirre and his accomplices employed the Ploutus malware in jackpotting attacks between February 2024 and December 2025. These coordinated assaults saw financial institutions’ automated teller machines (ATMs) emptied of their cash, with losses often exceeding $100,000 per incident. The malware’s sophistication lay in its ability to evade detection by security analysts, using anti-analysis measures such as software protection utilities to prevent reverse-engineering and debugging.
The investigation revealed a complex scheme involving the laundering of stolen funds and their subsequent transfer to accounts controlled by the Tren de Aragua (TdA) Venezuelan gang. The Justice Department has designated TdA as both a transnational criminal organization and a foreign terrorist organization, highlighting its involvement in a range of illicit activities including drug trafficking, commercial sex trafficking, kidnapping, robbery, theft, fraud, and extortion.
Canelon Aguirre’s arrest marks the latest development in a series of high-profile crackdowns on the TdA gang. In October 2025, the Justice Department charged 98 suspects linked to ATM jackpotting schemes, with maximum sentences ranging from 20 to 335 years in prison each. This wave of arrests follows a warning issued by the FBI in February that criminals had stolen more than $20 million in 2025 through massive surges of ATM hacking attacks.
The Ploutus malware’s notoriety stems from its ability to compromise even the most secure financial systems, leaving institutions vulnerable to coordinated attacks. As cybersecurity threats continue to evolve, it is essential for organizations and individuals alike to remain vigilant against such sophisticated tactics. By understanding the methods used by cybercriminals, we can better prepare ourselves against the ever-changing threat landscape.
As Canelon Aguirre faces justice in the United States, this case serves as a stark reminder of the need for robust cybersecurity measures and international cooperation in combating transnational cybercrime.
Source: Bleeping Computer — 2026-10-05