CyberNew CyberNew
Ransomware & Malware The Record 1 month ago

Five plead guilty in latest federal ATM jackpotting case

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: CRITICAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Ransomware & Malware

Analyst Takeaway

"Image: Lorenzo Schiavi via Pexels Five plead guilty in latest federal ATM jackpotting case Five Venezuelan nationals have pleaded guilty to conspiracy to commit bank larceny after prosecutors accused them of being part of a group dedicated to robbing ATMs using malware. A Kansas federal court sentenced Luis Alberto Velasquez-Artigas, 27, to nine months in prison while the other four defendants —..."

Recommended Defense & Mitigation

  • Emergency Patching: Prioritize vendor patches and CVE mitigation across internet-facing assets immediately.
  • Perimeter Audit: Inspect perimeter firewall logs and hunt for unauthorized RCE indicators.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
ATM
Image: Lorenzo Schiavi via Pexels

Five plead guilty in latest federal ATM jackpotting case

Five Venezuelan nationals have pleaded guilty to conspiracy to commit bank larceny after prosecutors accused them of being part of a group dedicated to robbing ATMs using malware. 

A Kansas federal court sentenced Luis Alberto Velasquez-Artigas, 27, to nine months in prison while the other four defendants — Royder Adrian Figuera-Perez, 29, Javier Mejia, Jr, 27, Gabriel Alexjandro Corales-Garcia, 33, and Italo Lizandro Corrales-Carrillo, 26 — are awaiting sentencing. 

According to court documents, the men drove from Indiana to Kansas in December 2025 to rob several ATMs in Wamego and Manhattan through jackpotting — a process in which criminals break into an ATM and install malware that allows them to empty it. 

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →