October 02, 2026
FBI's First Cyber Fugitive on the Ten Most Wanted List Is Back on U.S. Soil
Photo: Federal Bureau of Investigation
A Venezuelan man accused of being the malware engineer behind a multimillion-dollar ATM heist ring — and the first cybercriminal ever placed on the FBI's Ten Most Wanted Fugitives list — is back on American soil.
Anibal Alexander Canelon Aguirre, 50, also known as "Prometheus" and "The Engineer," appeared in a federal courtroom in Nebraska on Friday, Oct. 2, for his initial appearance on four federal conspiracy charges tied to an ATM "jackpotting" scheme that prosecutors say funneled millions of dollars to Tren de Aragua, the transnational criminal organization the U.S. has designated a foreign terrorist organization.
He pleaded not guilty and will remain detained while awaiting trial, according to the Department of Justice.
What "jackpotting" is
An ATM "jackpotting" attack is a cyberattack in which criminals exploit vulnerabilities in an ATM — often through malware — to force the machine to dispense cash, the DOJ says. Prosecutors allege Canelon Aguirre developed the malicious software at the heart of the operation and was one of the leaders of a large international conspiracy that deployed crews across the United States to hit financial institutions, with proceeds flowing to Tren de Aragua.
The FBI has said the conspiracy has been running since at least 2024. The DOJ says nearly 350 alleged members and associates of the organization have been charged since it was designated a foreign terrorist organization.
The charges
Canelon Aguirre faces four conspiracy counts:
- conspiracy to commit bank fraud
- conspiracy to commit bank burglary
- conspiracy to commit computer fraud
- conspiracy to commit money laundering and to provide material support to a foreign terrorist organization
The bank fraud conspiracy count carries the highest maximum penalty — up to 30 years in prison, according to the DOJ.
The manhunt
Canelon Aguirre was added to the FBI's Top 10 Most Wanted Fugitives list in March 2026 — fugitive number 540, and the first cybercriminal in the list's history. He was captured in Venezuela last month. FBI Director Kash Patel described him to lawmakers as one of the nation's top fugitives and called this the 10th Top Ten capture since the start of the current administration.
"Now he's back in the United States to face justice," Patel said. "There is nowhere on this planet criminals can hide."
What happens next
He remains in custody in Nebraska pending trial. The case continues — and the feds aren't done: the broader jackpotting investigation has dozens of defendants, and Attorney General Todd Blanche said the DOJ will "continue to break up narcoterrorist finance networks."
Sources: U.S. Department of Justice, Fox News. Charges are allegations; Canelon Aguirre is presumed innocent unless and until proven guilty.
Source: U.S. Department of Justice / Fox News — read the original report
← Back to latest stories