The US Treasury Department has imposed sanctions on Anibal Alexander Canelon Aguirre, known as 'Prometheus', who is alleged to have developed malware used in ATM jackpotting attacks. These attacks are linked to the criminal group Tren de Aragua, with operations extending into Mexico and Venezuela but targeting ATMs primarily in the United States. The malware, known as Ploutus, allows attackers to remotely bypass ATM security systems and dispense cash until the machine is empty or the operation is stopped. Reported losses from these attacks have surpassed $40 million, with over 1,500 incidents recorded across the United States as of August 2025. In addition to Prometheus, seven associates have been sanctioned, and they face charges including bank fraud and money laundering conspiracy in Nebraska. The Treasury's actions also block any US-based property these individuals hold, and US persons are prohibited from engaging in transactions with them. The Justice Department has charged 119 individuals in connection with the ATM jackpotting scheme, with several already sentenced, including lengthy prison terms for key figures in the operation.