malware
United StatesThe Hacker News
United StatesThe Hacker NewsU.S. DOJ Charges 54 in ATM Jackpotting Scheme Using Ploutus Malware
Saturday, December 20, 2025
What
The indictment involves a large-scale conspiracy where members of Tren de Aragua used the Ploutus malware to hack ATMs, forcing them to dispense cash. The malware was installed through physical access to the machines, allowing the perpetrators to issue unauthorized commands. The operation has siphoned millions from U.S. ATMs, with proceeds allegedly funding terrorist activities.
Where
United States
When
Indictments were announced in December 2025 and October 2025, with jackpotting incidents recorded since 2021.
Key Factors
- •Use of Ploutus malware to exploit ATM vulnerabilities
- •Physical access required to install malware on ATMs
- •Connection to Tren de Aragua, a designated Foreign Terrorist Organization
Takeaways
- →Organizations must enhance physical security measures for ATMs to prevent unauthorized access.
- →The incident highlights the need for robust cybersecurity protocols in financial institutions.
- →Regular audits and updates of ATM software can mitigate risks associated with malware attacks.
Read Full Article
Opens original article on The Hacker News