Venezuelan Cyber Fugitive Faces US Court After High-Seas Capture

Venezuelan national Aníbal Alexander Canelón Aguirre, 50, known by aliases "Prometeo" and "El Ingeniero," appeared before a federal judge in Nebraska on October 2 and pleaded not guilty to four conspiracy charges. These include bank fraud, computer fraud, money laundering, and providing material support to terrorists. He remains detained pending trial.

Canelón Aguirre was added to the FBI's Ten Most Wanted Fugitives list in March 2026, becoming the first cybercriminal and the 540th person ever placed on the list. FBI Director Kash Patel confirmed he was the tenth fugitive captured since the start of the Trump administration.

“Aníbal Alexander Canelón Aguirre is the tenth member of the list of the Ten Most Wanted Fugitives captured by this FBI since the start of the Trump administration and the first cyber fugitive.”

Authorities accuse him of developing the "Ploutus" malware used in "jackpotting" attacks that force ATMs to dispense cash without debiting accounts. The scheme allegedly targeted machines in 47 states, the District of Columbia, and several other countries, netting millions of dollars.

Prosecutors allege the proceeds were laundered through a network linked to the Tren de Aragua gang. The Treasury Department's OFAC sanctioned Canelón Aguirre and associates in Venezuela, Colombia, and Mexico last week for allegedly financing the group. Over 120 other defendants have been charged in the Nebraska case.

The FBI revealed the capture actually took place at sea, not in Venezuela as initially reported. Special Agent Eugene Kowel stated the US Coast Guard apprehended him with support from the FBI's Critical Incident Response Group. He was then transported by sea and air to Nebraska.