FBI Marks Historic Shift in National Security as First Cyber-Terrorist Architect Joins Ten Most Wanted Fugitives List

Anibal Aguirre, architect of a million-dollar ATM jackpotting scheme funding the Tren de Aragua terrorist group, is the first cybercriminal on the FBI Top 10 list.

By: AXL Media

Published: Mar 12, 2026, 5:11 PM EDT

Source: Information for this report was sourced from Fox News

A Technological Pivot for the FBI's Iconic List

For the first time since its inception in 1950, the FBI’s Ten Most Wanted Fugitives list—a roster historically occupied by serial killers and cartel kingpins—now features an alleged cybercriminal. Anibal Alexander Canelon Aguirre, identified as Fugitive No. 540, represents a significant evolution in how federal authorities define the country's most dangerous threats. FBI Director Kash Patel emphasized that the modern criminal landscape has shifted, noting that today’s most impactful fugitives often leverage malware rather than traditional weaponry to destabilize national security and prey on the American financial system.

The Mechanics of ATM "Jackpotting"

Canelon Aguirre, known by the aliases "Prometheus" and "The Engineer," is the alleged architect of a sweeping ATM "jackpotting" conspiracy. This cyber-enabled crime involves the installation of custom-built malware into the internal systems of automated teller machines. Once compromised, the machines are remotely triggered to dispense their entire cash reserves on command—an illicit process that "jackpots" the machine for criminal crews. Federal investigators in Omaha, Nebraska, have already charged 93 defendants involved in the logistical side of this operation, but Aguirre remains the high-value target responsible for the underlying technology.

Financing the Tren de Aragua Terror Network

The federal investigation, spearheaded by the U.S. Attorney’s Office for the District of Nebraska, has successfully traced millions of dollars in stolen ATM funds from American communities back to Venezuela. Prosecutors allege that Aguirre’s operation provides a critical revenue stream for Tren de Aragua (TdA), a transnational criminal organization recently classified as a terrorist group by the United States. U.S. Attorney Lesley Woods stated that the funds are used to bankroll the group's "terroristic activities and purposes," making Aguirre a central figure in the global infrastructure of organized crime and foreign terror.