Cyber Threat Actor: Sinaloa Cartel

The Sinaloa Cartel, also known by its alias, is a criminal organization based in Mexico that has been observed targeting law enforcement assets along the United States‑Mexico border. According to reporting from the U.S. Department of Homeland Security and U.S. Customs and Border Protection, the cartel’s actors have attempted to compromise unmanned aerial vehicles used by border patrol to facilitate covert movement of people and goods across the frontier. Their strategic objective, as described in the source material, is to enable illegal and secret border crossings that support their illicit trafficking activities.

The tactic employed by the cartel involves GPS spoofing, a technique in which false GPS signals are transmitted to the drone’s receiver, causing it to calculate an erroneous position and adjust its flight path accordingly. By deploying a GPS jammer or spoofer, the actors force the UAV to deviate from its assigned patrol corridor, repeatedly correcting course until the drone exhausts its fuel or the operators cease the interference. The articles note that the only effective defense against this method is the integration of anti‑GPS‑spoofing hardware into the drone’s design, a solution currently deemed too costly and bulky for widespread adoption by the agencies involved. In response, the Department of Homeland Security has funded research programs aimed at reducing the expense and size of such protective technology.

Publicly reported operations include the series of incidents where drug traffickers successfully disrupted border patrol drones through GPS spoofing, prompting official acknowledgment from DHS and CBP of the vulnerability. These events represent a concrete example of the cartel’s use of cyber‑enabled methods to undermine surveillance capabilities and advance its smuggling objectives. The documented cases illustrate how the group adapts readily available electronic attack tools to achieve operational gains in the border environment.