A federal grand jury returned an additional indictment charging 31 individuals in a scheme that deployed Ploutus malware to force ATMs to dispense cash, bringing the total charged to 87. DOJ alleged links between the jackpotting ring and Tren de Aragua, saying proceeds funded transnational organized‑crime and terrorist activity.

The Department of Justice disclosed an expanded indictment in a sprawling international ATM jackpotting investigation, adding 31 defendants to bring the total charged to 87. Authorities say the network used Ploutus family malware and operational tactics to coerce ATMs into dispensing large sums of cash, often coordinating remotely to withdraw proceeds. DOJ filings and public statements describe investigative findings that tie elements of the jackpotting operation to members and associates of Tren de Aragua, a Venezuelan criminal organization; prosecutors allege the group exploited ATM malware and other financial crimes to generate revenue streams that supported transnational organized‑crime activities and potentially funded terrorist-linked operations. The probe spans multiple countries and involves complex digital-forensic work to trace malware command-and-control infrastructure, cash-out locations, and money-movement channels. Law enforcement emphasized the case demonstrates how cyber-enabled financial intrusions can be integrated into broader criminal enterprises, and officials signaled continued cooperative actions with international partners to dismantle remaining infrastructure and pursue additional charges and asset forfeitures.