Los Zetas
Attribution profile
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Los Zetas is a criminal organization known by that alias and is based in Mexico. The group originated in the late 1990s as a faction of former special forces soldiers who initially served as enforcers for the Gulf Cartel before breaking away to form an independent syndicate. Over time Los Zetas recruited individuals with military and police backgrounds, which shaped its internal structure and operational approach. Its core presence remains within Mexican territory, where it maintains a network of cells and safe houses.
Los Zetas is principally engaged in the production, transportation, and distribution of illicit narcotics such as cocaine, marijuana, and methamphetamine. The organization also carries out extortion, kidnapping for ransom, human smuggling, and the theft of hydrocarbons including gasoline and diesel. These activities are conducted across various regions where the group seeks to control smuggling routes and local markets. Los Zetas additionally participates in money‑laundering schemes to conceal the proceeds of its illicit enterprises.
In executing its operations Los Zetas relies on armed force, intimidation, and extensive informant networks. Members frequently employ military‑style weapons and tactics, including the establishment of roadblocks, the execution of ambushes, and the deployment of lookout crews known as halcones to monitor law‑enforcement movements. The group has been known to construct clandestine tunnels and use concealed vehicles to evade detection when moving contraband or people across borders. Its approach emphasizes rapid, violent responses to perceived threats or incursions by rival organizations.
Several high‑profile incidents have been publicly linked to Los Zetas, including the 2010 San Fernando massacre in which hundreds of migrants were killed and the 2011 attack on the Casino Royale in Monterrey that resulted in numerous fatalities. The organization has also been implicated in coordinated prison breaks and repeated clashes with rival cartels that have drawn national and international attention. These events illustrate the group's capacity to conduct large‑scale violent operations that affect civilian populations and security forces alike.
Incidents
Attributed incidents are available to members.
0 incidents