FBI Arrests First Ever Cyber Fugitive on Top 10 Most Wanted List

The FBI has arrested its first ever cyber fugitive on the Top 10 Most Wanted Fugitives list, marking a significant milestone in their efforts against cyber-enabled financial crime networks. Anibal Alexander Canelon Aguirre, a 50-year-old Venezuelan national, was captured in Venezuela and appeared in a Nebraska courtroom on Friday.

He pleaded not guilty to four federal conspiracy charges, including bank fraud, money laundering, computer fraud, and providing material support to terrorists. If convicted, he faces a maximum penalty of 30 years in prison for conspiracy to commit bank fraud and up to 15 years for material support conspiracy.

Canelon Aguirre is accused of orchestrating a malware-driven ATM theft operation spanning much of the U.S. Prosecutors allege he helped develop and deploy the Ploutus malware, specifically designed to manipulate ATMs into dispensing cash without legitimate transactions. The FBI added him to its 10 Most Wanted Fugitives list in March 2026, designating him as the first cybercriminal to receive the designation. An indictment was issued in December 2025, and the case is now moving toward trial.

Tren de Aragua, a Venezuelan gang designated as a foreign terrorist organization by the U.S., is at the center of the conspiracy. Canelon Aguirre is believed to have played a central role in developing and deploying the malware used in the ATM attacks. The DOJ alleges that the criminal activity of Tren de Aragua ranges from drug trafficking and firearms offenses to kidnapping, extortion, robbery, and human trafficking.

Federal officials emphasize that the case combines cybercrime, organized crime, and national security concerns, reflecting the agency's commitment to combating international criminal organizations that rely on cyber tools to generate revenue.