Anibal Alexander Canelon Aguirre

☆ pin

Also known as Prometheus, The Engineer

Reports

First seen

Oct 1, 2026

Last seen

Oct 6, 2026

Motivation

Financial

Targeting

Sectors

Financial Services ×2

Victim regions

×4

United States×4

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Top ATT&CK techniques

T1005 Data from Local System ×2T1486 Data Encrypted for Impact ×1T1566 Phishing ×1T1027 Obfuscated Files or Information ×1T1204 User Execution ×1T1041 Exfiltration Over C2 Channel ×1T1036 Masquerading ×1T1562 Impair Defenses ×1T1056 Input Capture ×1T1070 Indicator Removal ×1

Recent reports

High

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Targeting

Top ATT&CK techniques

Recent reports

Alleged ATM Malware Creator Arrested and Appears in Court

Alleged Ploutus ATM Malware Developer Arrested After FBI Investigation

US sanctions Tren de Aragua gang members in ATM hacks crackdown

US sanctions 10 over ATM malware scheme tied to Tren de Aragua