Threat Intelligence

Alleged Cartel Malware Operator Arrested Over ATM Jackpotting Scheme

Dark Reading · 9 Oct 2026

Key Takeaway If your business owns or hosts an ATM or other cash-handling device, make sure it is physically secured, regularly checked for tampering, and kept up to date with your provider's security patches.

A man described as the malware specialist for the Venezuelan criminal group Tren de Aragua has reportedly been arrested over ATM jackpotting. He is said to be the first cybercriminal ever named to the FBI's "10 Most Wanted Fugitives" list.

According to the report, he allegedly helped fund the group's violent criminal operations with cash obtained through these schemes. ATM jackpotting generally means using malicious software to make a cash machine dispense money without a legitimate transaction. The case shows how violent criminal organisations are drawing on cybercrime skills to raise money.

The source summary does not give further details, such as where the arrest took place, the amounts involved, or the methods used. Businesses that own or host cash machines, or that handle large volumes of cash, should treat this as a reminder that physical and digital security are closely linked.

ATM jackpotting malware organised crime FBI financial crime

Summarised by CISO AI from Dark Reading, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.