Thirty-one people have been charged by a federal grand jury in Nebraska for using Ploutus malware to steal millions of dollars from ATMs around the United States This article explores colombia atm jackpotting. . The Tren de Aragua (TdA) gang, a recognized foreign terrorist organization, is connected to this "ATM jackpotting" scheme.
In recent months, it has brought the total charges to 87 TdA members. Authorities claim that TdA's violent crimes, including trafficking and murder, were financed by the plot. Conspiracy to commit bank fraud, bank burglary, computer fraud, and computer damage are among the 32 counts listed in the indictment. Suspects could spend up to 335 years behind bars if found guilty.
Numerous defendants, including TdA members who entered the US illegally, are citizens of Venezuela or Colombia. How ATM Jackpotting Operates Without valid cards or PINs, ATM jackpotting deceives machines into spitting out cash.
Malware such as Ploutus is used by criminals to take control of the ATM's cash dispenser. Initially discovered in 2013, Ploutus targets ATMs with Windows XP or older operating systems. It forces payouts by sending fictitious commands to the Cash Dispensing Module (CDM).
First, teams scouted ATMs in banks. They opened the machine's hood to check for alarms. It was safe if there was no reaction. They then used three methods to install Ploutus: Removed the ATM’s hard drive and loaded malware directly.
Swapped it with a pre-infected drive. Plugged in a USB drive to deploy the code remotely. Once active, Ploutus deletes logs to hide tracks. It fools bank staff by wiping evidence.
Groups split stolen cash afterward. Photos from the case show tools like USBs and open ATM panels mid-attack.
This expands on earlier indictments. 22 people were accused of money laundering and jackpotting connected to TdA in a December 2025 case. A similar fraud in October hit 32.
Millions are lost, affecting banks and credit unions across the country. In the 2000s, TdA began as a prison gang in Venezuela. These days, it operates throughout the Americas, including the US, selling drugs, firearms, sex trafficking, and extortion. Jackpotting offers fast money to support these operations.
It is referred to by officials as a "revenue stream" for terrorism. TdA was described as a "complex terrorist organization" by Attorney General Pamela Bondi. Todd Blanche, Deputy AG, promised to use Joint Task Force Vulcan (JTFV) to destroy it. Lesley Woods, a US attorney in Nebraska, wants to reduce their funding.
Eugene Kowel of the Justice FBI emphasized the importance of tracking the funds.
FBI Omaha, HSI, and numerous other agencies are involved in the investigation. Executive Order 14159's HSTF targets gangs and cartels. JTFV, which was introduced in 2019 to combat MS-13, is currently fighting TdA.
Outdated software makes Technical Defenses Against Jackpotting ATMs vulnerable. Many people still use Windows XP, which hasn't been patched in years. Weak physical security is exploited by malware such as Ploutus, which allows attackers to insert devices through unlocked panels. Banks retaliate by: Tokenization and EMV chip cards lower the risk of card skimming.
Jammed Detection: If CDM is tampered with, sensors block it. Real-time notifications for unusual cashouts are provided by remote monitoring. Hardened OS: Switch to secure versions of Windows or Linux. ATMs are isolated from the internet by air-gapped networks.
Multi-factor access and firmware updates are recommended by CISA. Logical locks for security Intruders are slowed down by PIN-protected hoods. Digital defenses are still subordinated to physical access.
This instance demonstrates how cartels are using cyber tools. Defenses must "level up" as TdA does. A crackdown is indicated by the DOJ's 87 charges.
However, if banks don't upgrade quickly, more ATM attacks are imminent due to TdA in US cities.












.webp%3Fw%3D1068%26resize%3D1068%2C0%26ssl%3D1&w=3840&q=75)