A Venezuelan man accused of creating malware used to steal millions of dollars from ATMs across the United States pleaded not guilty in a Nebraska federal court.  He should be hit hard.

     Anibal Alexander Canelon Aguirre, 50, also known as "Prometheus" and "The Engineer," was captured after being added to the FBI's Ten Most Wanted Fugitives list in March.  He was the first alleged cybercriminal and the 540th person to be added to the list. Canelon Aguirre is accused of being a leader of a widespread ATM "jackpotting" operation connected to the Venezuelan gang Tren de Aragua.

     ATM jackpotting is when hackers use malware to force cash machines to dispense money without taking it from a bank account. Prosecutors said Canelon Aguirre developed a type of malware called Ploutus that was used in the attacks.  The software included protections meant to make it difficult for investigators to analyze and could delete itself from an ATM to hide evidence of the attack. 

     The operation targeted or carried out attacks in 47 states, Washington, D.C., and several foreign countries, according to the Justice Department.  So far, 120 people have been charged in Nebraska in connection with the alleged scheme. Federal investigators have tied the operation to Tren de Aragua, which the Trump administration designated a foreign terrorist organization.  Authorities said the gang has used ATM jackpotting as another source of revenue alongside crimes that include drug and firearms trafficking, kidnapping, robbery and extortion. 

      Canelon Aguirre was indicted in December on charges of conspiracy to commit bank fraud, bank burglary and computer fraud, money laundering and providing material support to terrorists.  The bank fraud charge carries a maximum sentence of 30 years in prison. He will remain in federal custody while awaiting trial.