Venezuelan Nationals Convicted in ATM Jackpotting Scheme to Be Deported

Luz Granados and Johan Gonzalez-Jimenez, both Venezuelan nationals, were convicted for their roles in an ATM jackpotting scheme that resulted in the theft of hundreds of thousands of dollars from U.S. banks. They pleaded guilty to conspiracy and computer crimes, having targeted older ATM models across South Carolina, Georgia, North Carolina, and Virginia. The pair connected laptops to the ATMs and installed malware that bypassed security protocols, allowing them to withdraw all available cash.

The Justice Department detailed how the defendants approached ATMs at night, removed the outer casing, and installed malware that forced the machines to dispense cash until they were emptied. Gonzalez-Jimenez received an 18-month prison sentence and was ordered to pay $285,100 in restitution, while Granados was sentenced to time served and must pay $126,340.

This case is part of a larger investigation into ATM jackpotting, with evidence shared with Nebraska authorities leading to the indictment of 54 individuals in a related conspiracy. The Nebraska indictments also include Jimena Romina Araya Navarro, an alleged leader of the Tren de Aragua Venezuelan gang, who was sanctioned by the Department of the Treasury.

The malware used in these attacks included a variant known as Ploutus, which was deployed by removing the ATM’s hard drive or using infected external devices. Once installed, the malware enabled unauthorized cash withdrawals and deleted evidence to evade detection.

Understanding the Broader Impact

The recent actions by the Justice Department, including the deportation of five other Venezuelan nationals involved in similar ATM jackpotting thefts, underscore the persistent threat posed by such cybercriminal activities. These incidents reveal vulnerabilities in ATM security that can be exploited by sophisticated attackers.

Organizations and everyday users should be aware of the risks associated with ATM transactions, particularly at older machines that may lack robust security measures. Monitoring bank statements and reporting any suspicious activity promptly can help mitigate potential losses.

As cybercriminals continue to evolve their tactics, it is crucial for financial institutions to enhance their security protocols and for users to remain vigilant against potential threats.