Carlos Javier Padron, 36, an illegal alien from Venezuela, was sentenced yesterday to 78 months in prison for his role in a conspiracy to deploy malware and steal millions of dollars from ATMs in the United States, a crime commonly referred to as “ATM jackpotting.” His co-defendant, Oddry Arnoldo Cabrera Torrealba, also known as “Luis Alejandro Berdugo Barraza,” 37, an illegal alien from Venezuela, was sentenced on June 11, to 78 months in prison for similar conduct. . “Carlos Javier Padron and Oddry Arnoldo Cabrera Torrealba helped deploy sophisticated malware as part of a transnational criminal network that hacked ATMs across the United States and stole millions of dollars through a technique known as ATM jackpotting – which caused bank ATMs to dispense the cash inside of them,” said Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division.
Key details of the case
“Crimes like this undermine the security of our financial institutions and fuel the operations of violent transnational criminal organizations such as Tren de Aragua (TdA). This sweeping investigation with the District of Nebraska and our law enforcement partners has disrupted this network at all levels. We will protect our financial institutions from technology enabled fraud.”.
Moreover, “ATM jackpotting is TdA’s business plan and their assessed primary source of revenue to fund their terrorist activities that range from reprehensible forms of human trafficking to armed robbery, murder. The general undermining of America’s national security by flooding our communities with controlled substances,” said U.S. Attorney Lesley Woods for the District of Nebraska.
Meanwhile, “We will use these prosecutions to put a chokehold on their funding pipeline.” . “TdA is a violent terrorist organization relying on a range of criminal activities to generate revenue supporting their campaigns of violence and terror,” said Special Agent in Charge Euguene Cowel of the FBI Omaha Field Office. “As criminal enterprises change tactics, we surge resources and adapt accordingly to protect the American people.
Enforcement actions and official statements
In addition, fBI Omaha will continue standing shoulder to shoulder with our local, state. Federal partners in the fight to dismantle and disrupt the activities of TdA locally and globally.” . “These individuals participated in a crime that was both an attack on the American financial system.
As a result, an effort by Tren De Aragua to fund even more terror in our country,” said Acting Special Agent in Charge Rick Sabatini of U.S. Immigration and Customs Enforcement Homeland Security Investigations (HSI) Kansas City. “I’m proud of our agents and partners for working tirelessly to pursue justice and put consumers at ease, knowing their bank’s health is sound and not at risk of being damaged by violent, dangerous criminals.”. For complete details, refer to the official DOJ press release.
According to court documents, Padron and Torrealba were part of a sophisticated criminal network responsible for ATM jackpottings throughout the United States. The members of the network conspired to develop and deploy a variant of malware known as Ploutus. Was deployed on ATMs and used to permit the unauthorized withdrawal of currency.
The conspiracy relied on individuals including Padron and Torrealba to deploy the Ploutus malware onto ATMs in person. Once installed and activated, the malware permitted the co-conspirators to issue commands to the cash dispensing module of the ATM in order to force unauthorized withdrawals of currency. The Ploutus malware also was designed to delete evidence of its existence to prevent financial institutions from detecting its use on ATMs. For related coverage, see Counterfeit coupon scheme caused $31.8 million in losses, seven sent to prison.
Specifically, padron and Torrealba were arrested by the Lincoln, Nebraska Police Department at the site of a jackpotting in October 2024. . Padron and Torrealba both pleaded guilty to one count of conspiracy to commit bank burglary and one count of computer fraud and intentional damage to a protected computer. At their respective sentencings, the Court also ordered both Padron and Torrealba to jointly pay $1,537,696 in restitution to the multiple victim banks. .
Subsequently, the investigation has established extensive direct and indirect links between the indicted co-conspirators and TdA. According to court documents, TdA is a violent transnational criminal organization that originated as a prison gang in Venezuela in the mid-2000s. TdA has expanded its criminal network throughout the Western Hemisphere and established a presence in the United States. For related coverage, see National health care fraud takedown results in 455 defendants charged in connection with over $6.5 billion in alleged fraud — DOJ.
At the same time, tdA’s criminal activities range from drug trafficking and firearms trafficking to commercial sex trafficking, kidnapping, robbery, theft, fraud, and extortion. TdA members also commit murder, assault, and other violent acts to advance the organization’s criminal activities. TdA has also developed an additional source of revenue stream through financial crimes that target financial institutions throughout the United States, including using ATM jackpotting to steal millions of dollars in cash.
In particular, fBI’s Omaha Field Office and HSI Omaha are investigating the case, with assistance from FBI’s Denver, Houston, Miami, New Orleans, Oklahoma, Sacramento, Seattle. Springfield Field Offices, and the United States Secret Service, U.S. Marshals Service (USMS), Customs and Border Protection, U.S.
Border Patrol, U.S. Citizenship and Immigration Services, Federal Housing Finance Agency Office of the Inspector General, Financial Deposit Insurance Corporation, Adams County Sheriff’s Office, Appanoose County Sheriff’s Office, Bates County Sheriff’s Office, Sheridan Police Department, Lake County Sheriff’s Office, Leesburg Police Department, Sterling Heights Police Department, Kearney Police Department, Warrant Police Department, Douglas County Sheriff’s Office, Colombus Police Department, Cass County Sheriff’s Office, Bluff City Police Department, Tennessee Bureau of Investigation, Lincoln Police Department, Gothenburg Police Department, Loudon Police Department, Alcoa Police Department, Milford Police Department, Grand Island Police Department, Nebraska State Patrol, Papillion Police Department, Central City Police Department, Holdrege Police Department, New York State Police, Berkeley Police Department, Cook County Electronic Monitoring Unit, Aurora Police Department, Austin Police Department, U.S. Capitol Police, Buffalo County Sheriff’s Office, City of Rome Police Department, Lancaster County Sheriff’s Office, McCook Police Department, Nebraska DMV Crime Analysts, Rantoul Police Department, Olathe Police Department, North Platte Police Department, Walla Walla Police Department, Milton-Freewater Police Department, Missoula Police Department, Omaha Police Department, Larimer County Sheriff’s Office, Sidney Police Department, Denver Police, Howard County Sheriff’s Office, St.
Investigation and prosecution details
Paul Police Department, Ozaukee County Sheriff’s Office, Glendale Police Department, Columbia Police Department, Brookfield Police Department, Wauwatosa Police Department, Mount Pleasant Police Department, Grafton Police Department, South Milwaukee Police Department, Dubuque Police Department, Fargo Police Department. Paducah Police Department. This case is being prosecuted by the Criminal Division’s Computer Crime and Intellectual Property Section, the U.S. Attorney’s Office for the District of Nebraska, and Joint Task Force Vulcan.