US authorities have detained Anibal Alexander Canelon Aguirre, the suspected developer of the Ploutus automated teller machine malware and a key leader in financial crime operations for the Tren de Aragua syndicate. Canelon Aguirre, also known as Prometheus and The Engineer, appeared in court on October 2, 2026, following his placement on the FBI's Top Ten Most Wanted fugitives list in March 2026, marking the first time an individual was added to the list specifically for cybercrime.
Charges and Legal Proceedings
The 50-year-old Venezuelan national was indicted in the United States in December 2025 alongside 21 other defendants on charges of bank burglary, fraud, and money laundering conspiracy. After being sanctioned by the US Treasury, Canelon Aguirre entered not guilty pleas during his court appearance and remains detained pending trial. US officials have not revealed specific details regarding how he was apprehended.
Mechanics of the Ploutus Malware
Ploutus malware enables ATM jackpotting, a technique where attackers compromise cash machines to force cash dispensations without deducting funds from bank accounts. The malicious software was engineered with built-in anti-analysis features to hinder forensic investigations and includes self-erasure capabilities to remove traces of code from infected systems after an attack. US officials attribute jackpotting schemes utilizing Ploutus across 47 states, the District of Columbia, and international locations to the illicit network.
Scope of the Syndicate Investigation
The arrest represents a significant development in ongoing federal law enforcement actions targeting Tren de Aragua's financial crimes network. To date, prosecutors have charged 120 defendants for participating in the jackpotting conspiracy, with three individuals—Oddry Arnoldo Cabrera Torrealba, Carlos Javier Padron, and Juan Manuel Gouveia Aguilera—already receiving prison sentences.
AI-generated editorial illustration; not a documentary photograph.
Source: FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware
SIGNAL TITANS
Leave a Reply