In the long arc of law enforcement's struggle to keep pace with digital crime, a milestone arrived quietly in a Nebraska courtroom: Anibal Alexander Canelon Aguirre, the first cyber criminal ever placed on the FBI's Ten Most Wanted list, stood before a judge after being returned from Venezuela to face justice. Known by the alias 'Prometheus,' the 50-year-old Venezuelan allegedly engineered a malware-driven ATM jackpotting scheme that funneled stolen millions to a designated foreign terrorist organization. His capture — the tenth fugitive apprehended since the current administration took office
FBI's first cyber fugitive captured in Venezuela faces ATM jackpotting charges
Criminals exploit vulnerabilities in the machine itself to make it spit out cash.
Mark
So this man Aguirre—he's a hacker, or is he something else?
Mimi
He's both. He developed the malware that makes ATM jackpotting work, but he was also a leader of the operation. The FBI describes him as leading a large international conspiracy. He's not sitting in a basement writing code; he's running an organization that steals millions.
Luke
Right, but let's be precise about what we know. The FBI says he led the conspiracy. Prosecutors say he developed the malware and was one of the leaders. Those are slightly different claims. We don't have his own statement yet.
Mark
What exactly is ATM jackpotting? It sounds like a slot machine.
Mimi
It's a cyberattack on the machine itself. Criminals exploit vulnerabilities—sometimes through malware—to make the ATM spit out cash. It's not hacking a bank's network; it's hacking the physical machine.
Luke
And the scheme has been running since at least 2024, according to the FBI. That's what they're saying. We should note that's their timeline, not independently verified yet.
Mark
Why does it matter that Tren de Aragua is designated a terrorist organization?
Mimi
Because it changes the charges. Aguirre doesn't just face bank fraud and computer fraud. He faces a charge of providing material support to a designated terrorist organization. That's a different legal category entirely.
Luke
And that designation happened before or after the ATM scheme started?
Mimi
The scheme started in 2024. The designation—I'd need to check when that was formally made, but it's recent enough that it's shaping how these cases are prosecuted now.
Mark
Ten fugitives captured since the Trump administration started. Is that actually a lot?
Luke
The FBI says it's 2.5 times the previous four-year total. So if you do the math, that's roughly double the annual rate. But we're comparing different administrations, different priorities, different resources. The number itself is real; the interpretation of what it means is worth questioning.
Mimi
What's clear is that Aguirre was considered significant enough to put on the Ten Most Wanted list. That's rare for a cyber criminal. It suggests the FBI sees this as more than just hacking—it's organized crime with international reach.
Mark
And he's in Nebraska now, awaiting trial.
Mimi
Yes. He pleaded not guilty. The bank fraud conspiracy charge alone carries thirty years. He'll be detained while the case proceeds.
Luke
One thing we don't know yet: how exactly he was captured in Venezuela, a country without an extradition treaty with the U.S. That detail matters for understanding how this actually happened.
Le Pouls
- A man who once operated in the shadows of two continents — coding malware under the alias 'Prometheus' and allegedly bankrolling a terrorist organization — now sits in federal detention in Nebraska, his fugitive chapter closed.
- The ATM jackpotting scheme he allegedly led is no ordinary theft: malware silently commandeers cash machines, forcing them to dispense money without a single human confrontation, a crime sophisticated enough to have earned its own name.
- The stolen funds were not kept — prosecutors say they were routed to Tren de Aragua, a Venezuelan criminal organization the U.S. has designated a foreign terrorist group, transforming a cybercrime case into a terrorism financing prosecution.
- Aguirre's return from Venezuela, a country with no extradition treaty with the United States, raises as many questions as it answers about how American law enforcement reached across that border to retrieve him.
- FBI Director Kash Patel has framed the ten recent Most Wanted captures as more than two and a half times the total from the previous four years, casting Aguirre's arrest as proof of a sharply accelerated enforcement posture.
- With nearly 350 Tren de Aragua members charged by the DOJ and a potential thirty-year sentence awaiting Aguirre, the case signals that Washington now views cybercrime linked to organized violence as infrastructure — not isolated incident.
In the long arc of law enforcement's struggle to keep pace with digital crime, a milestone arrived quietly in a Nebraska courtroom: Anibal Alexander Canelon Aguirre, the first cyber criminal ever placed on the FBI's Ten Most Wanted list, stood before a judge after being returned from Venezuela to face justice. Known by the alias 'Prometheus,' the 50-year-old Venezuelan allegedly engineered a malware-driven ATM jackpotting scheme that funneled stolen millions to a designated foreign terrorist organization. His capture — the tenth fugitive apprehended since the current administration took office — signals that the boundaries between cybercrime, organized violence, and terror financing are no longer treated as separate concerns by American law enforcement.
Anibal Alexander Canelon Aguirre entered a not guilty plea in a Nebraska courtroom last Friday, a quiet legal formality that belied the extraordinary journey that brought him there. The 50-year-old Venezuelan, who operated under aliases like 'Prometheus' and 'The Engineer,' had been the FBI's first cyber criminal ever placed on its Ten Most Wanted list. His capture in Venezuela the previous month and subsequent return to American soil marked the tenth fugitive apprehended since the Trump administration took office — a statistic FBI Director Kash Patel says exceeds by more than two and a half times the total from the entire prior four-year period.
The crime at the center of the case is known as ATM jackpotting — a form of attack in which malware is used to exploit vulnerabilities in cash machines, forcing them to dispense money automatically. Prosecutors allege Aguirre developed the malicious software and served as a leader of the conspiracy, which has been operating since at least 2024 and targeted financial institutions across multiple countries. What elevates the case beyond cybercrime is where the money allegedly went: to Tren de Aragua, a Venezuelan criminal organization the United States has designated a foreign terrorist group.
That designation carries serious legal weight. In addition to bank fraud and computer fraud charges, Aguirre faces a count of providing material support to a designated terrorist organization. The bank fraud charge alone carries a maximum sentence of thirty years. He remains detained in Nebraska while awaiting trial.
His case sits within a much larger enforcement campaign. The Department of Justice has charged nearly 350 alleged members and associates of Tren de Aragua since the terrorist designation was imposed, with Attorney General Todd Blanche describing the effort as targeting narcoterrorist finance networks. The framing is deliberate: law enforcement no longer treats these crimes as isolated digital offenses, but as financial infrastructure sustaining organized violence. That Aguirre was retrieved from a country with no extradition treaty with the United States only deepens the signal — the reach of American prosecution, it seems, now extends further than the treaties suggest.
Anibal Alexander Canelon Aguirre stood in a Nebraska courtroom on Friday and entered a plea of not guilty. The 50-year-old Venezuelan, known by aliases that read like a spy thriller—"Prometheus," "The Engineer"—had just been returned to American soil after months as a fugitive. He now faces four federal conspiracy charges tied to what prosecutors describe as a multimillion-dollar scheme to rob ATMs using malware, a crime that has become sophisticated enough to warrant its own name in law enforcement circles: jackpotting.
Aguirre's capture last month in Venezuela marks a milestone for the FBI, though not one that would have seemed possible a few years ago. He was the first cyber criminal ever placed on the Bureau's Ten Most Wanted list, and his return represents the tenth fugitive apprehended since the Trump administration took office. FBI Director Kash Patel framed the statistic as evidence of accelerated enforcement: ten captures in recent months, he said, exceed by more than two and a half times the total number of Ten Most Wanted fugitives caught during the entire previous four-year period.
The mechanics of Aguirre's alleged crime are worth understanding. An ATM jackpotting attack is not a bank robbery in the traditional sense. Instead, criminals exploit security vulnerabilities in the machines themselves, often through malware, to force them to dispense cash automatically. Prosecutors say Aguirre developed the malicious software and served as one of the conspiracy's leaders. The scheme has been operating since at least 2024, targeting financial institutions across multiple countries. The money stolen, according to the FBI, was funneled to support Tren de Aragua, a Venezuelan criminal organization that the United States has designated as a foreign terrorist group.
The designation matters legally and strategically. Because Tren de Aragua carries that label, Aguirre faces not only bank fraud and computer fraud charges but also a count of providing material support to a designated terrorist organization. The bank fraud conspiracy charge alone carries a maximum sentence of thirty years in prison. He will remain detained in Nebraska while awaiting trial.
The broader enforcement picture extends well beyond Aguirre's case. The Department of Justice has charged nearly 350 alleged members and associates of Tren de Aragua since the terrorist designation was imposed. Attorney General Todd Blanche characterized Aguirre's arrest as part of a larger effort to dismantle what he called narcoterrorist finance networks. The language reflects how law enforcement now views these crimes—not as isolated cybercriminal activity but as infrastructure supporting organized violence and drug trafficking.
Aguirre's journey from fugitive to defendant also illustrates the reach of American law enforcement beyond U.S. borders. He was apprehended in Venezuela, a country with no extradition treaty with the United States, yet he was returned and now faces trial in an American courtroom. The mechanics of that capture remain largely undisclosed, but the result is clear: a man the FBI considered significant enough to place on its most-wanted list is now in federal custody, awaiting prosecution for crimes that span continents and involve the convergence of cybercrime and organized terror financing.
Citations marquantes
Now he's back in the United States to face justice. This FBI is running on supercharged horsepower—and there is nowhere on this planet criminals can hide.— FBI Director Kash Patel
The capture and arrest of Anibal Alexander Canelon Aguirre marks yet another success for the Homeland Security Task Force and Joint Task Force Vulcan. We will continue to break up narcoterrorist finance networks, prosecute violent criminals, and keep American neighborhoods safe.— Attorney General Todd Blanche
Envie de l'histoire complète ?
Lire l'original sur Fox News ↗
Crime & Justice