U.S. DOJ Charges 54 in ATM Jackpotting Scheme Using Ploutus Malware

The U.S. Department of Justice just dropped the hammer on a massive ATM jackpotting crew — 54 people charged for using Ploutus malware to literally print money from ATMs. This isn't some small-time hustle; we're talking $40.73 million in losses across the U.S. since 2021. The operation's linked to Tren de Aragua, a notorious Venezuelan gang that's been expanding its cybercrime portfolio.

Here's how they pulled it off: The crew used Ploutus malware to hijack ATMs, forcing them to spit out cash without any card or authorization. They'd physically access the machines, install the malware, and then remotely trigger the cash-out. This isn't new — Ploutus has been around since at least 2013 — but the scale and coordination here are next-level.

The DOJ's crackdown is part of a broader effort to dismantle transnational cybercrime networks. Tren de Aragua isn't just about ATM jackpotting; they're into drug trafficking, human smuggling, and other serious crimes. This case shows how cyber and physical crime are merging — and why law enforcement is scrambling to keep up.

If you're in cybersecurity, this is a wake-up call. ATM security isn't just about skimmers anymore; it's about defending against sophisticated malware attacks that can turn machines into cash printers. The financial industry needs to step up its game — because these crews aren't slowing down.