Back to News
malwareUnited StatesThe Hacker News

U.S. DOJ Charges 54 in ATM Jackpotting Scheme Using Ploutus Malware

Saturday, December 20, 2025

U.S. DOJ Charges 54 in ATM Jackpotting Scheme Using Ploutus Malware

What

The indictment involves a large-scale conspiracy where members of Tren de Aragua used the Ploutus malware to hack ATMs, forcing them to dispense cash. The malware was installed through physical access to the machines, allowing the perpetrators to issue unauthorized commands. The operation has siphoned millions from U.S. ATMs, with proceeds allegedly funding terrorist activities.

Where

United States

When

Indictments were announced in December 2025 and October 2025, with jackpotting incidents recorded since 2021.

Key Factors

  • Use of Ploutus malware to exploit ATM vulnerabilities
  • Physical access required to install malware on ATMs
  • Connection to Tren de Aragua, a designated Foreign Terrorist Organization

Takeaways

  • Organizations must enhance physical security measures for ATMs to prevent unauthorized access.
  • The incident highlights the need for robust cybersecurity protocols in financial institutions.
  • Regular audits and updates of ATM software can mitigate risks associated with malware attacks.
Read Full Article

Opens original article on The Hacker News

Similar News