CSIDB logo
Threat actor

Tijuana Cartel

Attribution profile

Type
Crime Syndicate
Location
Mexico
Known incidents
0 incidents
Sources
1 source
First seen
-
Last seen
-
Updated
2026-08-01 02:55
Aliases
1 alias

STIX characteristics

Threat actor characteristics are available to members.

Profile narrative

The Tijuana Cartel, also known by its alias, is a criminal organization based in Mexico that has expanded its activities into the cyber domain. Open source reporting identifies the group as a drug trafficking syndicate involved in smuggling narcotics across the United States‑Mexico border. The cartel’s involvement in cyber operations was highlighted by U.S. Department of Homeland Security and Customs and Border Protection disclosures concerning unmanned aerial vehicles used for border surveillance. These disclosures describe how members of the cartel have interfered with the navigation of border patrol drones to facilitate illicit crossings.

The cartel’s primary target in these incidents is the fleet of small unmanned air vehicles operated by U.S. Customs and Border Protection along the southern border. The objective appears to be financial, as disrupting drone patrols enables the movement of drug shipments without detection. The technique employed is GPS spoofing, wherein the cartel transmits false GPS signals to the drones’ receivers, causing them to calculate erroneous positions. The false data prompts the drones to deviate from their assigned patrol routes and fly toward locations that the spoofed coordinates suggest are correct. Because the drones lack anti‑spoofing hardware, they repeatedly attempt to reacquire the correct signal, creating a back‑and‑forth pattern that drains battery life and eventually forces the aircraft to return to base. This leaves a temporary gap in surveillance that traffickers exploit to move contraband across the border.

Publicly reported operations include a series of incidents in which DHS and CBP observed drones leaving their designated corridors after receiving spoofed GPS data, allowing smugglers to slip through the surveillance net. One representative case described in the reporting shows a drone that, after being fed false coordinates, drifted away from the border zone, remained out of fuel, and returned to base while traffickers completed a crossing. The attribution of these actions to the Tijuana Cartel rests on the alias used in the open‑source reporting and the group’s known presence in the Mexican border region. No evidence links the cartel to a state sponsor; the activity is characterized as a criminal consortium focused on narcotics trafficking.

Incidents

Attributed incidents are available to members.

0 incidents

Sources

Sources available to members: 1 source.

CSIDB