{"id":52347,"date":"2026-10-01T13:15:02","date_gmt":"2026-10-01T13:15:02","guid":{"rendered":"https:\/\/cryptomag.finance\/?p=52347"},"modified":"2026-10-01T13:15:02","modified_gmt":"2026-10-01T13:15:02","slug":"tren-de-aragua-atm-malware-network-sanctioned-after-40730000-stolen-from-u-s-banks-across-over-1500-attacks","status":"publish","type":"post","link":"https:\/\/cryptomag.finance\/?p=52347","title":{"rendered":"Tren de Aragua ATM Malware Network Sanctioned After $40,730,000 Stolen From U.S. Banks Across Over 1,500 Attacks"},"content":{"rendered":"<p><img decoding=\"async\" width=\"1024\" height=\"600\" src=\"https:\/\/dailyhodl.com\/wp-content\/uploads\/2025\/07\/bank-tiger-billionaire.jpg?resize=1024,600\" class=\"webfeedsFeaturedVisual wp-post-image\" alt=\"\" loading=\"lazy\" \/><\/p>\n<p>A foreign terrorist organization\u2019s ATM malware ring has drained $40,730,000 from U.S. banks across more than 1,500 jackpotting attacks.<\/p>\n<p>The U.S. Department of the Treasury\u2019s Office of Foreign Assets Control on September 30th of 2026 <a href=\"https:\/\/home.treasury.gov\/news\/press-releases\/sb0640\" rel=\"noopener\" target=\"_blank\">says<\/a> it designated 10 targets tied to a Tren de Aragua fraud scheme that has become a key revenue source for the group, plus a high-ranking TdA leader.<\/p>\n<p>The Mexico- and Venezuela-based network installs malware that forces ATMs to dispense cash, then moves proceeds including through cryptocurrency.<\/p>\n<p>Treasury Secretary Scott Bessent said the administration will not let terrorist groups exploit the U.S. financial system through theft targeting Americans.<\/p>\n<p><em>\u201cPresident Trump\u2019s administration will not allow terrorist organizations like Tren de Aragua to exploit the U.S. financial system or enrich themselves through theft and other criminal activity targeting American individuals and businesses.\u201d<\/em><\/p>\n<p>As of August 2025, reported losses from alleged ATM jackpotting attacks totaled $40.73 million across over 1,500 attacks. FBI Top 10 Most Wanted fugitive Anibal Alexander Canelon Aguirre, known as Prometheus, orchestrates the operation.<\/p>\n<p>The State Department identified TdA as a Foreign Terrorist Organization on February 20th of 2025. Since October 21st of 2025, the Justice Department has indicted 98 people in ATM jackpotting schemes linked to TdA. The designations also cover Mexico-based firms including Enigma Community and Soluciones Integrales Toluca.<\/p>\n<p>Read more: <a href=\"https:\/\/home.treasury.gov\/news\/press-releases\/sb0640\" rel=\"noopener\" target=\"_blank\">https:\/\/home.treasury.gov\/news\/press-releases\/sb0640<\/a><\/p>\n<p><em><span>Follow us on <a href=\"https:\/\/x.com\/TheDailyHodl\" target=\"_blank\" rel=\"noopener\">X<\/a>, <a href=\"https:\/\/www.facebook.com\/thedailyhodl\/\" target=\"_blank\" rel=\"noopener\">Facebook<\/a> and <a href=\"https:\/\/t.me\/thedailyhodl\" target=\"_blank\" rel=\"noopener\">Telegram<\/a><\/span><\/em><br \/>\n<br \/>\n<em><span>Don&#8217;t Miss a Beat \u2013 <a href=\"https:\/\/dailyhodl.com\/join-the-daily-hodl-email-list\/\" target=\"_blank\" rel=\"noopener\">Subscribe<\/a> to get email alerts delivered directly to your inbox <\/span><\/em><br \/>\n<\/p>\n<div class=\"hideinamp\">\n<div class=\"dianomi_context\" data-dianomi-context-id=\"736\"><\/div>\n<p>&amp;nbsp<\/p>\n<h6>Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any assets including cryptocurrencies, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.<\/h6>\n<\/div>\n<p><span><em>Generated Image: Midjourney<\/em><\/span><\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/dailyhodl.com\/2026\/10\/01\/tren-de-aragua-atm-malware-network-sanctioned-after-40730000-stolen-from-u-s-banks-across-over-1500-attacks\/\">Tren de Aragua ATM Malware Network Sanctioned After $40,730,000 Stolen From U.S. Banks Across Over 1,500 Attacks<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/dailyhodl.com\/\">The Daily Hodl<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>A foreign terrorist organization\u2019s ATM malware ring has drained $40,730,000 from U.S. banks across more than 1,500 jackpotting attacks. The U.S. Department of the Treasury\u2019s Office of Foreign Assets Control on September 30th of 2026 says it designated 10 targets tied to a Tren de Aragua fraud scheme that has become a key revenue source [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":52348,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"class_list":["post-52347","post","type-post","status-publish","format-standard","has-post-thumbnail"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Tren de Aragua ATM Malware Network Sanctioned After $40,730,000 Stolen From U.S. Banks Across Over 1,500 Attacks - Cryptomag<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptomag.finance\/?p=52347\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Tren de Aragua ATM Malware Network Sanctioned After $40,730,000 Stolen From U.S. Banks Across Over 1,500 Attacks - Cryptomag\" \/>\n<meta property=\"og:description\" content=\"A foreign terrorist organization\u2019s ATM malware ring has drained $40,730,000 from U.S. banks across more than 1,500 jackpotting attacks. The U.S. Department of the Treasury\u2019s Office of Foreign Assets Control on September 30th of 2026 says it designated 10 targets tied to a Tren de Aragua fraud scheme that has become a key revenue source [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptomag.finance\/?p=52347\" \/>\n<meta property=\"og:site_name\" content=\"Cryptomag\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-01T13:15:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dailyhodl.com\/wp-content\/uploads\/2025\/07\/bank-tiger-billionaire.jpg?resize=1024,600\" \/>\n<meta name=\"author\" content=\"Crypto Magazine\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:site\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Crypto Magazine\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=52347#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=52347\"},\"author\":{\"name\":\"Crypto Magazine\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"headline\":\"Tren de Aragua ATM Malware Network Sanctioned After $40,730,000 Stolen From U.S. Banks Across Over 1,500 Attacks\",\"datePublished\":\"2026-10-01T13:15:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=52347\"},\"wordCount\":371,\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=52347#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/bank-tiger-billionaire-39zZuS.webp\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=52347\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?p=52347\",\"name\":\"Tren de Aragua ATM Malware Network Sanctioned After $40,730,000 Stolen From U.S. Banks Across Over 1,500 Attacks - Cryptomag\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=52347#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=52347#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/bank-tiger-billionaire-39zZuS.webp\",\"datePublished\":\"2026-10-01T13:15:02+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=52347#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cryptomag.finance\\\/?p=52347\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=52347#primaryimage\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/bank-tiger-billionaire-39zZuS.webp\",\"contentUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/bank-tiger-billionaire-39zZuS.webp\",\"width\":1024,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=52347#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cryptomag.finance\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Tren de Aragua ATM Malware Network Sanctioned After $40,730,000 Stolen From U.S. Banks Across Over 1,500 Attacks\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/\",\"name\":\"Cryptomag\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cryptomag.finance\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\",\"name\":\"Crypto Magazine\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"caption\":\"Crypto Magazine\"},\"sameAs\":[\"https:\\\/\\\/cryptomag.finance\",\"https:\\\/\\\/x.com\\\/cryptomagz\"],\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Tren de Aragua ATM Malware Network Sanctioned After $40,730,000 Stolen From U.S. Banks Across Over 1,500 Attacks - Cryptomag","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptomag.finance\/?p=52347","og_locale":"en_US","og_type":"article","og_title":"Tren de Aragua ATM Malware Network Sanctioned After $40,730,000 Stolen From U.S. Banks Across Over 1,500 Attacks - Cryptomag","og_description":"A foreign terrorist organization\u2019s ATM malware ring has drained $40,730,000 from U.S. banks across more than 1,500 jackpotting attacks. The U.S. Department of the Treasury\u2019s Office of Foreign Assets Control on September 30th of 2026 says it designated 10 targets tied to a Tren de Aragua fraud scheme that has become a key revenue source [&hellip;]","og_url":"https:\/\/cryptomag.finance\/?p=52347","og_site_name":"Cryptomag","article_published_time":"2026-10-01T13:15:02+00:00","og_image":[{"url":"https:\/\/dailyhodl.com\/wp-content\/uploads\/2025\/07\/bank-tiger-billionaire.jpg?resize=1024,600","type":"","width":"","height":""}],"author":"Crypto Magazine","twitter_card":"summary_large_image","twitter_creator":"@cryptomagz","twitter_site":"@cryptomagz","twitter_misc":{"Written by":"Crypto Magazine","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cryptomag.finance\/?p=52347#article","isPartOf":{"@id":"https:\/\/cryptomag.finance\/?p=52347"},"author":{"name":"Crypto Magazine","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"headline":"Tren de Aragua ATM Malware Network Sanctioned After $40,730,000 Stolen From U.S. Banks Across Over 1,500 Attacks","datePublished":"2026-10-01T13:15:02+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=52347"},"wordCount":371,"image":{"@id":"https:\/\/cryptomag.finance\/?p=52347#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/bank-tiger-billionaire-39zZuS.webp","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cryptomag.finance\/?p=52347","url":"https:\/\/cryptomag.finance\/?p=52347","name":"Tren de Aragua ATM Malware Network Sanctioned After $40,730,000 Stolen From U.S. Banks Across Over 1,500 Attacks - Cryptomag","isPartOf":{"@id":"https:\/\/cryptomag.finance\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=52347#primaryimage"},"image":{"@id":"https:\/\/cryptomag.finance\/?p=52347#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/bank-tiger-billionaire-39zZuS.webp","datePublished":"2026-10-01T13:15:02+00:00","author":{"@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"breadcrumb":{"@id":"https:\/\/cryptomag.finance\/?p=52347#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptomag.finance\/?p=52347"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptomag.finance\/?p=52347#primaryimage","url":"https:\/\/cryptomag.finance\/wp-content\/uploads\/bank-tiger-billionaire-39zZuS.webp","contentUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/bank-tiger-billionaire-39zZuS.webp","width":1024,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/cryptomag.finance\/?p=52347#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptomag.finance\/"},{"@type":"ListItem","position":2,"name":"Tren de Aragua ATM Malware Network Sanctioned After $40,730,000 Stolen From U.S. Banks Across Over 1,500 Attacks"}]},{"@type":"WebSite","@id":"https:\/\/cryptomag.finance\/#website","url":"https:\/\/cryptomag.finance\/","name":"Cryptomag","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptomag.finance\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040","name":"Crypto Magazine","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","caption":"Crypto Magazine"},"sameAs":["https:\/\/cryptomag.finance","https:\/\/x.com\/cryptomagz"],"url":"https:\/\/cryptomag.finance\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/52347","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=52347"}],"version-history":[{"count":0,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/52347\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/media\/52348"}],"wp:attachment":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=52347"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=52347"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=52347"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}