"With the Push of a Remote Button, Cash Pours Out"... U.S. Cartel Steals 55.2 Billion Won by Hacking ATMs

Over 1,500 Jackpotting Attacks Reported in the U.S.
Losses Reach $40.73 Million as Proceeds Are Laundered Through Cryptocurrency

The U.S. government has added individuals affiliated with Latin American criminal organizations, who have conducted so-called "jackpotting" attacks that plant malware in automated teller machines (ATMs) to steal cash, to its sanctions list.

A person is withdrawing money from an ATM. Not related to any specific content. Getty Images

On September 30, according to the Office of Foreign Assets Control (OFAC) of the U.S. Department of the Treasury, the sanctioned individuals include 10 people associated with the Latin American criminal organization Tren de Aragua (TdA), including Anibal Alexander Canelon Aguirre, also known as "Prometheus."

Prometheus is on the FBI’s Top 10 Most Wanted list and is accused of leading a series of "jackpotting" attacks. These involve planting malware in ATMs and then remotely manipulating the machines to withdraw large amounts of cash. The others on the sanctions list have been identified as accomplices involved in carrying out these attacks.

Hacking ATMs to Steal Cash... Laundering Proceeds Through Cryptocurrency

According to OFAC, the network led by Prometheus launched jackpotting attacks on ATMs in the United States, and then laundered the criminal proceeds through cryptocurrency transactions before sending funds to TdA members in various countries.

A crime organization accessing an ATM to steal cash. U.S. Department of Justice

Jackpotting is a technique in which attackers install malware or hack the system of an ATM to cause the machine to continuously dispense cash. Attackers gain physical access to the ATM, install malicious software on the hard drive, then remotely activate the ATM and send a withdrawal command.

This method allows criminals to seize control of the ATM itself and withdraw cash without needing to steal individual accounts, making it a major concern for financial institutions and law enforcement agencies. According to OFAC, more than 1,500 ATM jackpotting attacks were reported in the United States as of August last year, with total losses reaching $40.73 million (about KRW 5.52 billion).

U.S.: "Will Not Tolerate Abuse of the Financial System"

U.S. Treasury Secretary Scott Bessent stated, "The Trump Administration will not tolerate terrorist organizations like TdA abusing the U.S. financial system or amassing wealth through theft and other crimes targeting Americans and businesses."

Tools Used in the 'ATM Jackpotting' Crime. U.S. Department of Justice

Separately from this sanction, the U.S. Treasury Department has also designated Juan Gabriel Rivas Nunez, a high-ranking TdA leader involved in illegal gold mining, as subject to sanctions.

In addition, the U.S. government considers that TdA has funded its organization through various sources, including cybercrime, money laundering, and illegal mining, and is stepping up pressure on both the individuals and the networks involved.

This content was produced with the assistance of AI translation services.