Back to today’s briefing

Story perspectives

54 Charged in Aragua Gang's Multi-Million Dollar ATM Scheme

12/21/2025

50 12 Full Breakdown

Summary

Story summary

Fifty-four members of the Tren de Aragua (TdA) gang were charged by federal prosecutors for an ATM jackpotting scheme that used malware known as Ploutus to force ATMs to dispense cash, allegedly stealing millions from U.S. banks.
The indictments include charges of conspiracy to commit bank fraud and terrorism support, outlining the criminal scope of TdA's actions.
U.S. officials say the group threatens communities and will be dismantled.

History

Historical Context

The emergence of Ploutus malware in 2013 marked a significant shift in cybercrime, enabling criminals to manipulate ATMs and steal over $40 million globally. This evolution reflects a broader trend since the early 2000s, where malware increasingly targets financial systems, necessitating urgent enhancements in cybersecurity to protect institutions and communities from sophisticated threats like those posed by gangs such as Tren de Aragua.

1 of 2

Story summary

Fifty-four members of the Tren de Aragua (TdA) gang were charged by federal prosecutors for an ATM jackpotting scheme that used malware known as Ploutus to force ATMs to dispense cash, allegedly stealing millions from U.S. banks.
The indictments include charges of conspiracy to commit bank fraud and terrorism support, outlining the criminal scope of TdA's actions.
U.S. officials say the group threatens communities and will be dismantled.

1 / 2