Treasury Blacklists Top ATM Malware Creator

The U.S. Treasury has added a prominent ATM jackpotting hacker and his associates to its sanctions list, marking the latest step in a government effort to dismantle the criminal group behind the “Tren de Aragua” scheme. The designation targets the individual who developed the malicious software used to force cash dispensers to release money and the network that distributes the code.

The sanctions affect banks, ATM operators, and service providers that may have unknowingly processed transactions linked to the illicit software. The malware works by exploiting vulnerabilities in ATM firmware, allowing attackers to command the machine to dispense cash without a valid transaction. Once the code is installed, criminals can remotely trigger payouts, often stealing large sums before the breach is detected.

Financial institutions are urged to review their ATM security protocols, apply firmware updates promptly, and monitor for unusual cash‑withdrawal patterns. Users should be aware that the scam does not directly target individual cardholders, but compromised ATMs can lead to broader service disruptions and potential loss of confidence in banking services.

To protect yourself, regularly check your bank statements for unauthorized withdrawals and report any irregular activity immediately. ComputerScams.com offers a free tool to monitor bank account activity and alert you to suspicious transactions. Keeping your device software up to date and using strong, unique passwords for online banking further reduces risk.

The Treasury’s action underscores the importance of coordinated cyber‑security efforts between government agencies and the private sector. While the sanctions aim to cripple the criminal network, ongoing vigilance remains essential for both banks and consumers.

Stay safe online by reviewing your account activity weekly and enabling two‑factor authentication on all banking apps.

Source: Read the original report