logo

OFAC Sanctions Tren de Aragua Fugitive Who Laundered ATM Heists With Crypto

ID: 0f463187-5072-5549-9bea-6032818743a0

STIX ID: report--0f463187-5072-5549-9bea-6032818743a0

Feed Name: Chainalysis Blog

Threat Score
75/100

Date Published: 2026-09-30

Date Updated: 2026-10-01

Author: Chainalysis Team

...
...

Chainalysis reports that Anibal "Prometheus" Aguirre and Tren de Aragua conducted widespread ATM "jackpotting" using Ploutus malware deployed via Raspberry Pi devices and physical ATM compromise, resulting in at least $40.73M stolen across over 1,500 attacks; the group laundered proceeds through stablecoins and shared crypto laundering infrastructure, prompting OFAC designations of Aguirre, six associates, and seven crypto deposit addresses.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.