A Venezuelan man, Anibal Alexander Canelon Aguirre, has been apprehended and extradited to the United States. Known by aliases “Prometheus” and “The Engineer,” Canelon Aguirre faces accusations related to a large-scale ATM hacking scheme. Federal prosecutors allege he played a leading role in an international conspiracy using malware to make ATMs dispense cash. This operation reportedly supported Tren de Aragua, a notorious Venezuelan criminal syndicate.
On Friday, October 2, Canelon Aguirre appeared in Nebraska before U.S. Magistrate Judge Michael D. Nelson. He pleaded not guilty to four federal charges. The charges include conspiracy to commit bank fraud, bank burglary, fraud related to computers, money laundering, and providing material support to terrorists. He remains detained in Nebraska, awaiting trial.
The organization, Tren de Aragua, began as a prison gang in Venezuela before expanding its operations across the Western Hemisphere. It has been linked to various crimes, including drug and firearms trafficking, kidnapping, and extortion. In February 2025, the Trump administration classified Tren de Aragua as a foreign terrorist group.
In March 2026, Canelon Aguirre was named the 540th individual on the FBI’s Most Wanted Fugitives list, marking him as the first alleged cybercriminal on the list. The FBI alleged he led a global conspiracy that targeted U.S. financial institutions, stealing millions in the process. This conspiracy allegedly used Ploutus malware in a tactic known as “ATM jackpotting,” where malware forces ATMs to disburse cash without withdrawing funds from a bank account.
The malware was designed with features to hinder forensic analysis and reverse-engineering. It included components to erase its presence from infected systems, complicating detection by financial institutions. Assistant Attorney General A. Tysen Duva stated that Canelon Aguirre was crucial in creating the advanced malware, which facilitated Tren de Aragua’s criminal activities.
The maximum penalty for conspiracy to commit bank fraud is 30 years in prison, with potential fines reaching $1 million. Conspiracy to commit money laundering carries a penalty of up to 20 years. Providing material support to terrorists has a maximum sentence of 15 years.
The alleged scheme reportedly operated since at least January 2024, affecting ATMs in 47 states, Washington, D.C., and several countries. The Justice Department indicated 120 individuals have faced charges in Nebraska in connection with the conspiracy. Three have been sentenced in the state, including Oddry Arnoldo Cabrera Torrealba, Carlos Javier Padron, and Juan Manuel Gouveia Aguilera, receiving prison terms ranging from 78 to 96 months.
FBI Director Kash Patel noted Canelon Aguirre was the 10th fugitive on the Ten Most Wanted list captured since 2017. The FBI has faced criticism over its handling of the list, with allegations of strategically adding fugitives before imminent arrests. The FBI refuted these claims, maintaining the accuracy of its arrest records.
Leave a Reply