Alleged Creator of Ploutus ATM Jackpotting Malware Arrested After FBI Investigation
What Happened — Federal authorities arrested Anibal Alexander Canelon Aguirre, alleged architect of the Ploutus malware used to “jackpot” ATMs. The FBI says the strain has enabled more than 1,500 attacks and $40 million in cash losses across the United States and Latin America.
Why It Matters for Trust & Control Assurance
- Physical and logical access to high‑value devices (ATMs) is a classic control‑objective gap that continuous monitoring programs are built to detect and evidence.
- Demonstrating robust access‑control policies, tamper‑evident safeguards, and audit logs provides defensible proof of due diligence to regulators and auditors.
Who Is Affected – Banks, ATM operators, and third‑party service firms that manage or service ATM hardware.
Recommended Actions – Review and harden physical access controls on ATMs, implement tamper‑evident seals, enforce strict change‑management logging for any device connection, and collect evidence for audit readiness. Source: The Record
Technical Notes – Ploutus is a malware family that requires an attacker to open the ATM, attach a personal device, and execute code that forces the machine to dispense cash. The attack vector combines physical intrusion with malicious software deployment; no specific CVE is cited. Source: The Record