Prometheus

Anibal Alexander Canelon Aguirre, also known as 'Prometheus' and 'The Engineer,' was arrested and appeared in U.S. court for allegedly developing Ploutus malware, which enabled ATM jackpotting attacks across the United States. Between February 2024 and December 2025, these attacks targeted banks and credit unions in 47 states and the District of Columbia, stealing over $5.4 million in confirmed incidents and attempting to steal an additional $1.4 million. The malware included anti-analysis and self-deletion capabilities to evade detection and forensic investigation. Canelon Aguirre and his co-conspirators laundered the proceeds and transferred them to accounts controlled by the Tren de Aragua (TdA) Venezuelan gang, a designated transnational criminal organization and foreign terrorist organization.