US indicts 31 more in ATM jackpotting scheme

The U.S. Justice Department has disclosed charges against 31 more individuals in connection with a large ATM jackpotting conspiracy that used Ploutus malware to steal cash from machines across the country, according to The Record, a news site by cybersecurity firm Recorded Future.

According to the indictment, the group was able to pilfer at least $5.4 million from a minimum of 63 ATMs between February 2024 and December 2025. Investigators said that the scheme involved careful planning, with attackers allegedly monitoring ATMs, opening their doors to check for alarms, and proceeding only if law enforcement did not respond. They then removed the machines' hard drives and replaced them with infected ones or inserted USB drives that deployed Ploutus malware. Once installed, the malware allowed the attackers to bypass ATM protections and force the machines to dispense cash.

The Justice Department said some defendants are undocumented immigrants tied to the Venezuelan gang Tren de Aragua. Charges include conspiracy to commit bank burglary and computer fraud, damage to computers, bank burglary, and conspiracy to commit bank fraud. Last month, 56 other suspects were charged in the same operation.