[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foKeIISiMoKVebzddJRCvRBuY2tc3LMHkYGKwjDClSgU":3},{"article":4,"iocs":54,"watch_terms":68,"solutions":69,"lesson":101},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"7e4920b2-bbf0-4009-bf8d-10669ff57dab","Five Venezuelans plead guilty to ATM jackpotting attacks in US","five-venezuelans-plead-guilty-to-atm-jackpotting-attacks-in-us-e47d03","Five Venezuelan nationals pleaded guilty to attempting to empty automated teller machines (ATMs) using malware in a series of ATM jackpotting attacks. [...]","Five Venezuelan nationals have pleaded guilty to conspiracy charges related to ATM jackpotting attacks across the United States. The group targeted ATMs they believed were vulnerable to malware, aiming to empty them of cash. While their attempts in Kansas were unsuccessful, surveillance footage led to their arrest.","Five Venezuelans plead guilty to ATM jackpotting attacks in the US.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Ffive-venezuelans-plead-guilty-to-atm-jackpotting-attacks-in-us\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F09\u002F01\u002FWoman_Bank_ATM_Card.jpg","2026-09-01T09:15:07+00:00","2026-09-01T10:00:21.60323+00:00",7,[17,20,23,25,27,29],{"name":18,"type":19},"Tren de Aragua","threat_actor",{"name":21,"type":22},"ATMii","product",{"name":24,"type":22},"ATMitch",{"name":26,"type":22},"GreenDispenser",{"name":28,"type":22},"Alice",{"name":30,"type":22},"RIPPER","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":31,"icon":33,"name":34,"slug":35},null,"Breaches","breaches",[37,39,44,49],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55,57,58,59,60,61,63,65],{"type":48,"value":21,"context":56},"Malware used in ATM jackpotting attacks.",{"type":48,"value":24,"context":56},{"type":48,"value":26,"context":56},{"type":48,"value":28,"context":56},{"type":48,"value":30,"context":56},{"type":48,"value":62,"context":56},"Skimer",{"type":48,"value":64,"context":56},"SUCEFUL",{"type":48,"value":66,"context":67},"Ploutus","Malware used in ATM jackpotting attacks, linked to Tren de Aragua.",[21,24,26],{"controls":70,"vendors":100},[71],{"slug":72,"name":73,"problem":74,"products":75},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[76,84,92],{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",[],{"slug":102,"title":103,"body":104,"framework_refs":105,"framework_notes":116},"atm-jackpotting-gang-exploits-unpatched-machines-across-the-us","ATM Jackpotting Gang Exploits Unpatched Machines Across the US","Five Venezuelan nationals pleaded guilty to ATM jackpotting attacks — a technique where malware is installed on ATMs to force them to dispense cash on demand. The attackers specifically targeted machines they believed were running outdated or vulnerable software, highlighting the critical danger of unpatched ATM infrastructure. Physical access to ATMs combined with software vulnerabilities creates a potent attack vector that can result in significant financial losses for banks and businesses. This case also demonstrates the value of surveillance and logging systems, as footage was instrumental in identifying and apprehending the suspects. Financial institutions must treat ATM security with the same rigor applied to enterprise IT systems.",[106,107,108,109,110,111,112,113,114,115],"CIS Control 2 – Inventory and Control of Software Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-82 – Guide to ICS\u002FOT Security","NIST SI-2 – Flaw Remediation","NIST AC-3 – Access Enforcement","NIST AU-6 – Audit Record Review and Analysis","PCI DSS Requirement 6 – Develop and Maintain Secure Systems","PCI DSS Requirement 9 – Restrict Physical Access to Cardholder Data","PCI DSS Requirement 10 – Log and Monitor All Access to System Components",{}]