Explore Elite Risk Management Services

Private Strategic Group

Search

Intelligence Analysis

Colombia’s Armed-Drone Threat to Civil and Military Aviation

6 AUG 2026

/

8 min read


Escalating Cybersecurity Threat toward Aviation to Require Adaptive Measures

Key Takeaways:

  • Colombian violent non-state actors have demonstrated capability and limited, context-specific intent to target civil and military aviation.
  • Further drone attacks against aviation assets associated with state forces or rival armed groups, including regional and dual-use airports, military aircraft, and helicopters, are likely.
  • The broader concern is the continuing diffusion of armed-drone capabilities into regions and operational environments previously considered relatively insulated from them. 

Escalation and Adaptation Toward Aviation Targets

The emergence of weaponized drones as a threat to Colombian aviation infrastructure marks an important evolution in the country’s security environment, extending capabilities previously directed against military targets towards airports and other strategically significant facilities. The attack against Tibú airport on July 9, 2026 highlighted part of a broader escalation in the operational use of armed drones against aviation targets in Colombia. Between April 2023 and April 2026, Colombian armed groups conducted more than 460 drone attacks, which equates to approximately one strike every forty-eight hours. Although casualty figures vary across official sources, these attacks are estimated to have killed between twenty and fifty-eight people, most of them members of the national security forces.

In April and May 2026, Bogotá’s El Dorado International Airport (BOG) suspended operations on at least three occasions following drone sightings. While on May 6, the Colombian National Police, following an intelligence lead, located and deactivated an explosive-laden drone in grassland approximately 5.4 km (3.4 mi) from BOG, which hosts the Military Transport Air Command base (CATAM). The intended target and timing of the operation suggest the attack was designed to maximize strategic and political effect rather than simply damage infrastructure. A strike against the capital’s principal international gateway and adjoining military base could have amplified perceptions of state vulnerability, disrupted a nationally significant transport hub, and inserted the responsible armed group into the electoral debate through a highly visible demonstration of capability. 

Commercial Adaptations

Colombian armed groups are increasingly combining commercially available drone technology with locally developed tactics and munitions, accelerating the evolution of a domestic armed-drone capability. Armed groups must find inexpensive means of observing security forces, striking protected positions, and imposing costs on a state that possesses overwhelming superiority in conventional aviation and firepower. Commercial drones help narrow that asymmetry.

Authorities have found that commercial drones are regularly used and adapted to warfare. They are portable, relatively inexpensive at approximately USD 2,000, widely distributed and equipped with stabilized flight controls, high-resolution cameras, and reliable navigation systems, making them ideal for irregular warfare. With limited modification, the same drones can observe security-force positions, direct indirect fire, release an explosive payload, or be flown directly into a target as a one-way attack system.  

Another attack at BOG would be highly significant, challenging the state’s ability to control the airspace above its capital, creating disruption disproportionate to the cost of the weapon, and forcing authorities to invest in detection and counter-drone systems. Even an unsuccessful incursion can suspend flights, divert security resources, and demonstrate that strategically important infrastructure remains accessible to an armed group operating a commercial off the shelf platform. The consequences are therefore both commercial, through disruption and the diversion of resources, and political.

Colombian armed groups are increasingly incorporating battlefield innovations developed abroad, accelerating the sophistication of their domestic drone capabilities. The main methods reflect developments first refined on the Russia-Ukraine battlefield and subsequently circulated through commercial supply chains, online technical communities, and transnational criminal networks.  

International Influence

Fiber-optic control represents a further stage of adaptation. Conventional drones usually exchange commands and video with their operators through radio signals, which can be detected or disrupted by electronic countermeasures. A fiber-optic drone significantly reduces its vulnerability to radio-frequency jamming and makes it more difficult for systems that depend on detecting electronic emissions to locate either the aircraft or its operator. The technology emerged from the continuing competition between drones and electronic warfare in Ukraine and Russia. Its appearance in Colombia indicates that armed groups are observing developments abroad and adopting solutions specifically suited to defeating the countermeasures deployed against them.

Colombian armed groups have adapted foreign drone technology for their own purposes. They use commercially available airframes and deployment tactics sourced globally, combined with locally developed capabilities and materials. This creates a hybrid weapon that blends imported hardware and strategy with homegrown expertise.

Organizational adaptation has proceeded alongside technological change. Reports of drone-training schools, specialized pilots, modification workshops, and dedicated supply cells indicate that the capability is becoming institutionalized and mature. These functions allow an armed group to regenerate its capability after equipment is lost and to disseminate successful methods between fronts.  

Moreover, unconfirmed reporting further alleges that Colombian nationals linked to armed groups have joined Ukrainian forces specifically to acquire battlefield drone expertise for transfer back to Colombia, which would indicate deliberate knowledge acquisition and transfer. Rather than receiving expertise from an allied organization or state sponsor, individuals would embed within a conventional military engaged in active warfare, acquire battlefield experience, and return home with transferable skills. This would resemble established patterns of knowledge transfer among violent non-state actors, but through a different mechanism.

Evidence of training institutionalization emerged in May 2026, when Colombian authorities dismantled a network accused of acquiring commercial drones, modifying them to carry explosives, and supplying them to dissident factions. The seizure of airframes, first person view (FVP) equipment, spare components, satellite-connectivity systems, and other electronics points to an established procurement and technical-support structure capable of sustaining repeated operations. This further suggests that techniques borrowed from distant conflicts are being absorbed into a locally sustained system of procurement, training, technical modification, and operational employment. 

Implications

The spread of armed drone capabilities is reshaping how violent non-state actors can threaten aviation infrastructure while achieving strategic and political effects disproportionate to the cost of the weapon. Armed groups adopt new technology to circumvent established security measures, gain an advantage over rival organizations, demonstrate capability, and signal intent, among other reasons. Their selection of targets nevertheless remains political.  

Dual-use airports such as BOG are attractive targets because they allow armed groups to signal an ability to threaten both military assets and nationally significant civilian infrastructure through a single operation while preserving ambiguity over the intended target. The movement of tactics developed in Russia and Ukraine into Colombia illustrates how rapidly commercially accessible technology and operational knowledge can cross geographic and ideological boundaries.  

A deliberate attack on passenger aviation could impose costs that outweigh its operational value by alienating local constituencies, undermining claims to legitimacy, and provoking an intensified state response. Drone attacks against airports carry a lower political cost and have become normalized through conflicts in the Middle East, contributing to a broader acceptance among violent non-state actors of aviation infrastructure as a coercive target. This is particularly the case when attacks can be calibrated to disrupt operations, impose economic costs, and attract attention without causing mass casualties.

The implications extend beyond Colombia, although there is no evidence that Colombian groups are directly exporting this capability across Latin America or that airports have become a systematic regional target. Weaponized drones have already been employed by cartels in Mexico, criminal factions in Brazil, and groups targeting prison infrastructure in Ecuador. As such, Colombia forms part of a broader regional process in which remotely operated explosives are becoming accessible to actors that previously lacked an aerial attack capability. 


Learn more about leveraging intelligence to stay ahead of risks to your people and operations.  

Sharpen your 
view of risk

Subscribe to our newsletter to receive our analysts’ latest insights in your inbox every week.