Investigated by ICE: the network linked to the Aragua Train that hacked into ATMs in the U.S.

The U.S. Immigration and Customs Enforcement (ICE) has announced the sentencing of two undocumented immigrants with criminal records who were part of a sophisticated network linked to the Tren de Aragua, a notorious transnational criminal organization known for hacking ATMs across the United States. The defendants, Carlos Javier Padrón, 36, and Oddry Arnoldo Cabrera Torrealba, 37, were each sentenced to six years and six months in federal prison for their roles in orchestrating cyber-enabled bank robberies. According to ICE, the investigation revealed that the group used custom-developed malware called Ploutus to siphon cash from automated teller machines (ATMs). This malicious software was designed to allow unauthorized withdrawals by sending commands to the cash-dispensing modules. Once activated, the malware could also erase digital traces of its activity, making detection by financial institutions more difficult. The two men were arrested by the Lincoln, Nebraska, Police Department during a cash heist, marking the initial point of law enforcement intervention into the operation. The Tren de Aragua, which originated as a prison gang in Venezuela in the early 2000s, has expanded its operations across much of the Western Hemisphere. It has established a presence in the United States over recent years, engaging in a range of illicit activities including drug trafficking, money laundering, and cybercrime. The organization’s involvement in ATM hacking represents a new front in its efforts to exploit vulnerabilities in financial systems. Padrón and Torrealba were found guilty of conspiracy to commit bank robbery and computer fraud, as well as intentional damage to a protected information system. During the sentencing hearing, they were ordered to jointly pay $1.537,696 in restitution to the banks affected by their actions. Both individuals have been charged with illegal presence in the United States. Padrón entered the country illegally in 2021 under the administration of President Joe Biden, while Torrealba's entry date and location remain undisclosed. Following the arrests, a comprehensive federal investigation uncovered a broader network of accomplices both within the U.S. and abroad. As of now, 96 additional suspects have been indicted for their participation in the scheme, facing charges such as supporting a designated foreign terrorist organization, bank robbery, and money laundering. These indictments underscore the scale and complexity of the criminal enterprise tied to the Tren de Aragua. Law enforcement agencies continue to track down remaining members of the network, focusing on dismantling the infrastructure that enabled these cyber-enabled crimes. The case highlights the evolving tactics of organized crime groups operating across borders, leveraging technology to execute financially motivated offenses. With the sentencing of Padrón and Torrealba, authorities have taken a significant step toward disrupting this transnational criminal operation.