FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware
Summary
The FBI has arrested Canelon Aguirre, who was allegedly a leader in Tren de Aragua's ATM jackpotting operations and was on the FBI's top 10 most wanted list since March 2026. Aguirre is accused of developing and operating the Ploutus ATM malware.
IFF Assessment
The arrest of a developer behind ATM jackpotting malware is bad news for defenders as it signifies the disruption of a criminal operation, but the underlying malware and tactics may persist or evolve.
Defender Context
The arrest of a key figure in ATM malware operations highlights the ongoing threat of financial fraud and the importance of robust security measures for financial institutions. Defenders should remain vigilant against evolving jackpotting techniques and malware strains, as disrupted criminal groups may adapt their methods.