[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdBYL8cWTZ8HNVQ3iKG76qVZDbAtzPFsoSjJCuJs12U4":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":48},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"549dec79-42d6-4552-b871-d9acdefcd976","Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting","venezuelan-cartel-s-malware-honcho-nabbed-for-atm-jackpotting-afe097","The first cybercriminal to ever make the FBI's \"10 Most Wanted Fugitives\" list allegedly infused Tren de Aragua's violent criminal operations with cash.","A key figure in the Venezuelan criminal organization Tren de Aragua, allegedly responsible for developing and deploying malware for ATM jackpotting, has been apprehended. This individual is notable as the first cybercriminal to be placed on the FBI's \"10 Most Wanted Fugitives\" list, highlighting the increasing convergence of violent organized crime and cybercriminality.","Venezuelan cartel's malware expert arrested for ATM jackpotting.","https:\u002F\u002Fwww.darkreading.com\u002Fcyberattacks-data-breaches\u002Fvenezuelan-cartel-malware-honcho-nabbed-atm-jackpotting","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fbltef4e90a751faf3e5\u002F6ac64ed06770201d6d216b2a\u002Fatm-keypad-pressing-buttons-Makhh-shutterstock.jpg?width=720&quality=80&disable=upscale","2026-10-08T19:08:16+00:00","2026-10-08T20:00:14.068875+00:00",8,[17],{"name":18,"type":19},"Tren de Aragua","threat_actor","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":20,"icon":22,"name":23,"slug":24},null,"Malware","malware",[26,31,33,38],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":32},{"id":20,"icon":22,"name":23,"slug":24},{"category":34},{"id":35,"icon":22,"name":36,"slug":37},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":39},{"id":40,"icon":22,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[],{"controls":46,"vendors":47},[],[],{"slug":49,"title":50,"body":51,"framework_refs":52,"framework_notes":64},"atm-jackpotting-ring-exposes-physical-cyber-security-gaps-in-banking-infrastructure","ATM Jackpotting Ring Exposes Physical & Cyber Security Gaps in Banking Infrastructure","The arrest of a Tren de Aragua malware developer highlights the dangerous convergence of organized violent crime and sophisticated cybercrime, specifically targeting ATM infrastructure through jackpotting attacks. ATM jackpotting exploits weak physical access controls, outdated operating systems, and poor endpoint hardening to force machines to dispense cash on demand. This case matters because financial institutions often underestimate the physical attack surface of their ATM networks, leaving them vulnerable to threat actors who combine boots-on-the-ground access with custom malware. The fact that this individual earned a spot on the FBI's 10 Most Wanted list underscores that cybercrime is no longer the exclusive domain of nation-states or lone hackers — organized criminal enterprises are now fielding dedicated technical talent.",[53,54,55,56,57,58,59,60,61,62,63],"CIS Control 2 – Inventory and Control of Software Assets","CIS Control 4 – Secure Configuration of Enterprise Assets","CIS Control 12 – Network Infrastructure Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-53 SI-3 – Malicious Code Protection","NIST SP 800-53 AC-3 – Access Enforcement","NIST SP 800-53 SC-7 – Boundary Protection","NIST Cybersecurity Framework PR.AC-5 – Network Integrity Protection","PCI DSS Requirement 6 – Develop and Maintain Secure Systems","PCI DSS Requirement 9 – Restrict Physical Access to Cardholder Data","ITIL – Problem Management (root cause analysis of recurring ATM compromise vectors)",{"NIST SP 800-53 AC-3 – Access Enforcement":65,"NIST SP 800-53 SC-7 – Boundary Protection":66,"CIS Control 13 – Network Monitoring and Defense":67,"NIST SP 800-53 SI-3 – Malicious Code Protection":68,"CIS Control 12 – Network Infrastructure Management":69,"CIS Control 2 – Inventory and Control of Software Assets":70,"CIS Control 4 – Secure Configuration of Enterprise Assets":71,"PCI DSS Requirement 6 – Develop and Maintain Secure Systems":72,"NIST Cybersecurity Framework PR.AC-5 – Network Integrity Protection":73,"PCI DSS Requirement 9 – Restrict Physical Access to Cardholder Data":74,"ITIL – Problem Management (root cause analysis of recurring ATM compromise vectors)":75},"Access enforcement ensures only authorised commands can trigger cash dispensing.","Boundary protection isolates ATM networks from untrusted connections.","Network monitoring can detect unusual commands or traffic from ATMs during jackpotting attempts.","Malicious code protection and application allow listing on ATMs can block jackpotting malware.","Network infrastructure management segments ATMs so attackers cannot reach them from other networks.","A software inventory helps detect unauthorised software installed on ATMs by jackpotting malware.","Secure configuration, such as disabling boot from external media and locking BIOS, makes jackpotting harder.","Secure systems requirements include patching outdated ATM operating systems that jackpotting exploits.","Network integrity protection, including segmentation, limits remote access to ATMs.","Restricting physical access to ATM internals prevents attackers connecting devices to install malware.","Problem management analyses recurring ATM compromise methods to fix root causes."]