For the first time in its more than 75-year history, the FBI’s Ten Most Wanted Fugitives list will include an alleged cybercriminal — and officials say it’s a sign of how today’s biggest threats don’t just carry guns, they carry malware.
Anibal Aguirre, who also goes by “Prometheus,” becomes Fugitive No. 540 on the FBI’s most notorious roster. Investigators say he is the alleged architect behind a sweeping ATM “jackpotting” scheme that uses custom-built malware to force cash machines across the United States to spit out money on command.
But authorities say this isn’t just high-tech theft.
Federal prosecutors allege the operation funnels millions of dollars to Tren de Aragua (TdA), the violent Venezuelan transnational criminal organization that U.S. officials describe as a terrorist group.
“The violent criminals on the FBI’s Top Ten Most Wanted Fugitives list are the worst of the worst, and they are in the FBI’s sights,” FBI Director Kash Patel said in a statement ahead of the announcement.
“For more than 75 years, the Ten Most Wanted Fugitives program has been one of the FBI’s most powerful tools for bringing dangerous criminals to justice.”
Patel makes clear the Bureau is counting on the public.
FBI CAPTURES TOP TEN MOST WANTED FUGITIVE IN MEXICO SOUGHT OVER 2016 MURDER OF NC CO-WORKER
“By sharing information about these fugitives with the public, we greatly expand the reach of our investigations,” he said. “Our message is simple: if you commit violent crimes or prey on innocent people, we will continue pursuing you — and with the public’s help, we will find you.”
Prosecutors in the District of Nebraska have charged 93 defendants in connection with the broader conspiracy. Authorities say many millions of dollars are drained from ATM machines across the country as part of the scheme.
U.S. Attorney Lesley Woods says investigators follow the money trail from compromised American ATMs all the way back to what she describes as the operation’s “terroristic roots in Venezuela.”
AURORA TERRORIZED BY VENEZUELAN GANG AS DICTATOR MADURO LET TREN DE ARAGUA SEIZE POWER
She says the stolen funds allegedly go to Tren de Aragua leaders “to fund their terroristic activities and purposes,” calling the case a major coordinated effort by state, local and federal law enforcement.
Woods says the investigation exposes the conspiracy “from its lowest levels to the alleged mastermind behind the malware” and removes dozens of TdA members from Nebraska.
“TdA members will find no safe harbor in the State of Nebraska,” she says.
Special Agent in Charge Eugene Kowel of the FBI’s Omaha Field Office said TdA “poses a direct threat to our communities both here in the Midwest and across our country.”
He said the organization relies on a range of criminal operations — including sophisticated cyberattacks on U.S. financial institutions — to bankroll violence and terror.
“As criminal enterprises change tactics, we surge resources and adapt accordingly to protect the American people,” Kowel said.
Homeland Security Investigations Special Agent in Charge Mark Zito called Tren de Aragua “a ruthless terrorist organization that preys on communities, spreads fear, and bankrolls violence across borders.”
“We will not tolerate foreign terrorists stealing from our citizens and threatening our homeland,” Zito said. “We will track you down.”
The Ten Most Wanted Fugitives list launched in 1950 and has traditionally featured serial killers, cartel bosses and violent fugitives.
By placing an alleged cyber architect on that list for the first time, the FBI is sending a clear message: digital financial warfare tied to foreign criminal networks now ranks among the most serious threats facing the country.
Authorities believe Aguirre may be in Venezuela and operating outside the United States.
Officials say elevating him to the Ten Most Wanted list is designed to generate international tips and increase pressure on the network behind the operation.
Anyone with information on his whereabouts is urged to contact the FBI.
