Two Illegal Aliens Sentenced in International ATM “Jackpotting” Conspiracy with Ties to Tren de Aragua

Carlos Javier Padron, 36, an illegal alien from Venezuela, was sentenced yesterday to 78 months in prison for his role in a conspiracy to deploy malware and steal millions of dollars from ATMs in the United States, a crime commonly referred to as “ATM jackpotting.” His co-defendant, Oddry Arnoldo Cabrera Torrealba, also known as “Luis Alejandro Berdugo Barraza,” 37, an illegal alien from Venezuela, was sentenced on June 11, to 78 months in prison for similar conduct. According to court documents, Padron and Torrealba were part of a sophisticated criminal network responsible for ATM jackpottings throughout the United States. The members of the network conspired to develop and deploy a variant of malware known as Ploutus, which was deployed on ATMs and used to permit the unauthorized withdrawal of currency. The conspiracy relied on individuals including Padron and Torrealba to deploy the Ploutus malware onto ATMs in person. Once installed and activated, the malware permitted the co-conspirators to issue commands to the cash dispensing module of the ATM in order to force unauthorized withdrawals of currency. The Ploutus malware also was designed to delete evidence of its existence to prevent financial institutions from detecting its use on ATMs. Padron and Torrealba were arrested by the Lincoln, Nebraska Police Department at the site of a jackpotting in October 2024. Padron and Torrealba both pleaded guilty to one count of conspiracy to commit bank burglary and one count of computer fraud and intentional damage to a protected computer. At their respective sentencings, the Court also ordered both Padron and Torrealba to jointly pay $1,537,696 in restitution to the multiple victim banks. Following the arrest of Padron and Torrealba, a comprehensive federal investigation identified a network of co-conspirators throughout the United States and abroad. Since the arrests of Padron and Torrealba, 96 other defendants have been indicted for their roles in this conspiracy for related offenses including material support to a designated foreign terror organization, bank burglary, money laundering, damage and unauthorized access to protected computers, bank fraud, and conspiracy to commit the same offenses. The investigation has established extensive direct and indirect links between the indicted co-conspirators and TdA. According to court documents, TdA is a violent transnational criminal organization that originated as a prison gang in Venezuela in the mid-2000s. TdA has expanded its criminal network throughout the Western Hemisphere and established a presence in the United States. TdA’s criminal activities range from drug trafficking and firearms trafficking to commercial sex trafficking, kidnapping, robbery, theft, fraud, and extortion. TdA members also commit murder, assault, and other violent acts to advance the organization’s criminal activities. TdA has also developed an additional source of revenue stream through financial crimes that target financial institutions throughout the United States, including using ATM jackpotting to steal millions of dollars in cash.