Source: US Immigration and Customs Enforcement
OMAHA, Neb. — Two criminal illegal aliens were sentenced to federal prison June 25 for conspiracy to deploy malware and steal millions from U.S.-based ATMs in a crime commonly known as “jackpotting” following an ICE Homeland Security Investigations Omaha investigation. The case is tied to the violent Tren de Aragua gang.
Carlos Javier Padron, 36, a criminal illegal alien from Venezuela, and his co-conspirator, Oddry Arnoldo Cabrera Torrealba, also known as Luis Alejandro Berdugo Barraza, 37, each received a six-and-a-half year prison sentence. Both men pleaded guilty to one count of conspiracy to commit bank burglary and one count of computer fraud and intentional damage to a protected computer. At their sentencings, the court also ordered them to jointly pay $1,537,696 in restitution to multiple banks they stole from.
“These individuals participated in a crime that was both an attack on the American financial system, and an effort by TdA to fund even more terror in our country,” said HSI Omaha Assistant Special Agent in Charge Elhrick Cerdan. “I’m proud of our agents and partners for working tirelessly to pursue justice and put consumers at ease, knowing their bank’s health is sound and not at risk of being damaged by violent, dangerous criminals.”
“Carlos Javier Padron and Oddry Arnoldo Cabrera Torrealba helped deploy sophisticated malware as part of a transnational criminal network that hacked ATMs across the United States and stole millions of dollars through a technique known as ATM jackpotting — which caused bank ATMs to dispense the cash inside of them,” said Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division. “Crimes like this undermine the security of our financial institutions and fuel the operations of violent transnational criminal organizations such as TdA . This sweeping investigation with the District of Nebraska and our law enforcement partners has disrupted this network at all levels. We will protect our financial institutions from technology enabled fraud.”
“ATM jackpotting is TdA’s business plan and their assessed primary source of revenue to fund their terrorist activities that range from reprehensible forms of human trafficking to armed robbery, murder, and the general undermining of America’s national security by flooding our communities with controlled substances,” said U.S. Attorney for the District of Nebraska Lesley Woods. “We will use these prosecutions to put a chokehold on their funding pipeline.”
“TdA is a violent terrorist organization relying on a range of criminal activities to generate revenue supporting their campaigns of violence and terror,” said Special Agent in Charge Euguene Cowel of the FBI’s Omaha field office. “As criminal enterprises change tactics, we surge resources and adapt accordingly to protect the American people. FBI Omaha will continue standing shoulder to shoulder with our local, state and federal partners in the fight to dismantle and disrupt the activities of TdA locally and globally.”
According to court documents, Padron and Torrealba were part of a sophisticated criminal network responsible for ATM jackpotting throughout the United States. The members of the network conspired to develop and deploy a variant of malware known as Ploutus, which was deployed on ATMs and used to permit the unauthorized withdrawal of currency. The conspiracy relied on individuals including Padron and Torrealba to deploy the Ploutus malware onto ATMs in person. Once installed and activated, the malware permitted the co-conspirators to issue commands to the cash dispensing module of an ATM to force unauthorized withdrawals of currency. The Ploutus malware also was designed to delete evidence of its existence to prevent financial institutions from detecting its use on ATMs. Padron and Torrealba were arrested by Nebraska’s Lincoln Police Department at the site of a jackpotting in October 2024.
Following Padron and Torrealba’s arrests, a comprehensive federal investigation identified a network of co-conspirators throughout the United States and abroad. Since the pair’s arrests, 96 other defendants have been indicted for their roles in this conspiracy for related offenses, including material support to a designated foreign terror organization, bank burglary, money laundering, damage and unauthorized access to protected computers, bank fraud and conspiracy to commit the same offenses.
The investigation has established extensive direct and indirect links between the indicted co-conspirators and TdA. According to court documents, TdA is a violent transnational criminal organization that originated as a prison gang in Venezuela in the mid-2000s. TdA has expanded its criminal network throughout the Western Hemisphere and established a presence in the United States. TdA’s criminal activities range from drug and firearms trafficking to commercial sex trafficking, kidnapping, robbery, theft, fraud and extortion. TdA members also commit murder, assault and other violent acts to advance the organization’s criminal activities. TdA has also developed an additional source of revenue stream through financial crimes that target financial institutions throughout the United States, including using ATM jackpotting to steal millions of dollars in cash.
Pardon unlawfully entered the United States in 2021 under the Biden administration. Torrealba entered the United States at an unknown time and location.
Padron’s criminal record includes an arrest on January 12, 2017, in Guadalajara, Mexico, on charges of armed robbery, attempted murder and drug possession. HSI Omaha and the FBI’s Omaha field office investigated this case, with assistance from the FBI’s Denver, Houston, Miami, New Orleans, Oklahoma, Sacramento, Seattle and Springfield Field Offices, the U.S. Secret Service, the U.S. Marshals Service, U.S. Customs and Border Protection, the U.S. Border Patrol, U.S. Citizenship and Immigration Services, the Federal Housing Finance Agency’s Office of the Inspector General, the Financial Deposit Insurance Corporation, the Adams County Sheriff’s Office, the Appanoose County Sheriff’s Office, the Bates County Sheriff’s Office, the Sheridan Police Department, the Lake County Sheriff’s Office, the Leesburg Police Department, the Sterling Heights Police Department, the Kearney Police Department, the Warrant Police Department, the Douglas County Sheriff’s Office, the Colombus Police Department, the Cass County Sheriff’s Office, the Bluff City Police Department, the Tennessee Bureau of Investigation, the Lincoln Police Department, the Gothenburg Police Department, the Loudon Police Department, the Alcoa Police Department, the Milford Police Department, the Grand Island Police Department, the Nebraska State Patrol, the Papillion Police Department, the Central City Police Department, the Holdrege Police Department, the New York State Police, the Berkeley Police Department, the Cook County Electronic Monitoring Unit, the Aurora Police Department, the Austin Police Department, the U.S. Capitol Police, the Buffalo County Sheriff’s Office, the City of Rome Police Department, the Lancaster County Sheriff’s Office, the McCook Police Department, the Nebraska DMV’s Crime Analysts, the Rantoul Police Department, the Olathe Police Department, the North Platte Police Department, the Walla Walla Police Department, the Milton-Freewater Police Department, the Missoula Police Department, the Omaha Police Department, the Larimer County Sheriff’s Office, the Sidney Police Department, the Denver Police Department, the Howard County Sheriff’s Office, the St. Paul Police Department, the Ozaukee County Sheriff’s Office, the Glendale Police Department, the Columbia Police Department, the Brookfield Police Department, the Wauwatosa Police Department, the Mount Pleasant Police Department, the Grafton Police Department, the South Milwaukee Police Department, the Dubuque Police Department, the Fargo Police Department and the Paducah Police Department.
This case was prosecuted by the Criminal Division’s Computer Crime and Intellectual Property Section, the U.S. Attorney’s Office for the District of Nebraska and Joint Task Force Vulcan. The Justice Department’s Office of International Affairs, the U.S. Attorney’s Offices for the Western District of Washington, Eastern District of California, Southern District of New York, Northern District of Illinois, Central District of Illinois, Eastern District of Oklahoma and Eastern District of Wisconsin, as well as the Larimer County Attorney’s Office, the Colorado Attorney General’s Office, the Tennessee 9th District Attorney General’s Office, the Tennessee 5th District Attorney General’s Office, the Texas Financial Crimes Intelligence Center, the East Baton Rouge Sheriff’s Office and the Louisiana State Police provided significant assistance.
This operation is part of the Homeland Security Task Force initiative established by Executive Order 14159, “Protecting the American People Against Invasion.” The HSTF is a whole-of-government partnership dedicated to eliminating criminal cartels, foreign gangs, transnational criminal organizations, and human smuggling and trafficking rings operating in the United States and abroad. Through historic interagency collaboration, the HSTF directs the full might of U.S. law enforcement towards identifying, investigating, and prosecuting the full spectrum of crimes committed by these organizations, which have long fueled violence and instability within our borders. In performing this work, the HSTF places special emphasis on investigating and prosecuting those engaged in child trafficking or other crimes involving children. The HSTF further utilizes all available tools to prosecute and remove the most violent criminal aliens from the United States. HSTF Omaha comprises agents and officers from the FBI and HSI with the prosecution being led by the U.S. Attorney’s Office for the District of Nebraska.
HSI and multiple partners comprise Joint Task Force Vulcan, created in 2019 to eradicate MS-13 and now expanding at the direction of the Attorney General to target TdA. JTFV is comprised of U.S. attorney’s offices across the country, including the Southern and Eastern Districts of New York; the Eastern and Western Districts of North Carolina; the Western District of Virginia; the Southern District of Florida; the Eastern District of Texas; the Western District of Oklahoma; the Northern District of Indiana; the District of Nevada; and the District of Arizona; the Executive Office for U.S. Attorneys; and the Department of Justice’s National Security Division, Criminal Division, and the Office of Judicial Attaché and DEA partners in Bogotá, Colombia. Additionally, the FBI, HSI, the ATF, the U.S. Marshals Service and the Federal Bureau of Prisons are essential law enforcement partners with JTFV.
The Computer Crime and Intellectual Property Section investigates and prosecutes cybercrime and intellectual property crime in coordination with domestic and international law enforcement agencies, often with assistance from the private sector. Since 2020, CCIPS has secured the conviction of over 180 cyber and IP criminals, and court orders for the return of over $350 million in victim funds.
Learn more about this case here.
Members of the public can report crimes and suspicious activity by dialing 866-DHS-2-ICE (866-347-2423) or completing the online tip form.
Learn more about HSI Omaha’s mission to increase public safety in our communities on X at @HSIKansasCity.