The February–May 2026 reporting window marks an inflection point in Colombia's internal armed conflict. Drone warfare has transitioned from a tactical novelty into the default mode of asymmetric engagement. Armed groups have moved beyond crude commercial quadcopters to fiber-optic guided systems, AI-assisted swarms, and FPV kamikaze drones borrowed directly from the Ukraine conflict playbook.
The threat envelope has widened in a direction that demands urgent attention. The period's most alarming development is not any single attack on military personnel — though the casualty figures are significant — but the deliberate extension of drone operations to critical civilian infrastructure: Colombia's national energy grid and its civilian airspace management system. This represents a qualitative shift in targeting doctrine that has not yet been fully absorbed in official assessments.
With presidential elections scheduled for May 31, 2026, the security environment is expected to deteriorate further before any improvement is possible. Multiple armed groups have explicitly signaled intent to disrupt the electoral cycle through infrastructure targeting. The probability of at least one high-profile drone incident before election day is assessed as HIGH.
Colombia's internal armed conflict has never been static. From machetes to landmines to car bombs to improvised grenade launchers, each decade introduces a new weapon that temporarily shifts battlefield advantage toward non-state actors until the state adapts. Drone warfare is the latest — and arguably most disruptive — iteration of this cycle.
The first documented drone incident in Colombia occurred in June 2018 in Barranco Minas, Guainía — an ELN-linked group dropped a commercially available drone carrying explosives over an Army unit. The device failed to detonate. By 2023, explosive-laden drones began appearing regularly in Cauca and Norte de Santander. By 2025, they had become the primary tactical tool of multiple armed groups. By early 2026, the pace of innovation had accelerated to a degree forcing complete strategic reassessment within the Colombian military.
The broader political context is critical. President Petro's "Paz Total" policy has effectively collapsed: ELN talks broke down following the January 2025 Catatumbo massacre; the EMC's dominant Mordisco faction walked away from negotiations in April 2024 and has since intensified operations; total combatant numbers across all factions have grown approximately 85% since 2017 and now exceed 25,000 fighters.
| Period | Dominant TTP | Notable Development |
|---|---|---|
| 2018–2022 | Reconnaissance only | First ELN drone sighting, Barranco Minas (failed detonation) |
| 2023 | Improvised explosive drops | First confirmed combat use, Argelia, Cauca (Apr 2023) |
| 2024 | Systematic attack campaigns | 449 attacks recorded since April; fiber-optic drone first deployed |
| Jan–Apr 2025 | Swarm experiments / AI drops | Operation Perseo: 183 attacks in El Plateado alone |
| Feb–May 2026 | Fiber-optic, FPV kamikaze, infrastructure strikes | Radar station attack; Hidroituango threatened |
This report draws on open-source intelligence (OSINT) collected across Spanish, English, and Portuguese-language sources during the reporting window. A multi-tier confidence rating is applied to all incidents and assessments. Sources are evaluated by tier, with official government and verified primary media carrying highest weight, and unverified single-source claims flagged explicitly as LOW confidence and not used as sole analytical basis.
| Source Type | Examples | Weight |
|---|---|---|
| Primary — Official | Ministerio de Defensa, Ejército Nacional, Aerocivil, Fiscalía | Highest |
| Primary — Verified Media | El Colombiano, El Tiempo, Infobae Colombia, The City Paper Bogotá | High |
| Secondary — Analysis | Inter-American Dialogue, CSIS, GTI 2026, ACLED, Infodefensa | Medium-High |
| Secondary — Broadcast | NBC News (17 verified videos), France 24, Reuters | Medium |
| Tertiary — Single-Source | Social media claims without independent corroboration | Low (flagged) |
The following catalog documents the most operationally significant confirmed incidents during the reporting window. It is not exhaustive — with an average attack frequency of one every 1.5 days, full enumeration exceeds the scope of a strategic assessment. Incidents are ordered chronologically.
ELN forces attacked the San Jorge military canton using fiber-optic guided drones — the first confirmed use of this technology in Colombia's conflict. Unlike RF-guided drones that can be jammed by standard countermeasures, fiber-optic guidance transmits commands through a physical cable, rendering existing anti-drone systems ineffective. Military investigators initially catalogued the strike as a conventional drone attack; post-incident forensics near the base revealed fiber-optic cabling. The existing anti-drone system at the base failed to detect or neutralize the threat.
The ELN deployed a first-person-view (FPV) drone in a kamikaze configuration against Colombian Armed Forces — the first officially confirmed use of this system type in the conflict. FPV drones allow operators to visualize the flight path in real time via a direct camera feed, dramatically increasing strike precision compared to pre-programmed approaches. The attack defeated the anti-drone system at the targeted installation. FPV platforms are the dominant offensive weapon on the Ukraine battlefield and had previously been considered a near-term risk rather than a confirmed current threat in Colombia.
First confirmed explosive-drone attack of 2026 attributed to the Estructura Jaimé Martínez — one of the EMC-Mordisco's most active cells in the southwestern corridor. Maintains the geographic pattern of Cauca as the highest-density attack department and establishes a 2026 operational baseline for this structure ahead of its April escalation.
Multiple incidents in Antioquia's Norte and Nordeste subregions. Most lethal: a drone-delivered explosive struck a residence in vereda La Jagua (Segovia) during clashes between FARC dissidents and the Clan del Golfo, killing a woman and two of her children and wounding a fourth family member. Approximately 125 families from three surrounding veredas displaced. A separate attack targeted a fuel station in Ituango with drone-dropped explosives, forcing closure and disrupting civilian fuel supply. Frente 18 operatives separately used drones to deny military helicopter access to areas where soldiers' bodies lay after combat.
Four high-capacity drones attributed to EMC's Frente 36 conducted systematic overflights of the Hidroituango hydroelectric spillway overnight March 1–2. The Army confirmed drone sightings but publicly denied issuing a formal threat alert — a statement directly contradicted by Medellín Mayor Federico Gutiérrez and Antioquia Governor Andrés Julián Rendón, both of whom stated they received Army calls recommending cancellation of an official visit involving approximately 100 journalists.
On the night of March 3, a second round of overflights occurred directly above the Hidroituango substation. No physical attack materialized. Note: Confidence rated MEDIUM due to the conflicting public statements between civilian and military officials, though the threat and overflights are not in dispute. The public rift itself represents an operational success for the Frente 36 regardless of physical outcome.
Drones equipped with loudspeakers flew over multiple Catatumbo hamlets broadcasting threatening messages. The Personería Municipal of El Tarra documented that 84 persons, including 33 minors, fled their homes immediately following the overflights. No explosives deployed. This incident documents the deliberate weaponization of drone noise and messaging as a low-cost displacement tool — achieving a security effect equivalent to a ground-based armed incursion at zero kinetic cost.
Army forces discovered and seized a clandestine drone pilot training center in Cantagallo. Seized materials included 23 mortar grenades and 38 improvised explosive devices calibrated for drone deployment. This seizure confirms the Clan del Golfo's investment in building structured drone warfare capacity — not merely ad hoc platform acquisition — and demonstrates geographic expansion of training infrastructure beyond traditional ELN/FARC heartlands into the Caribbean and Magdalena Medio corridors.
Soldiers Andrés Álvarez Sierra, Darwin Gómez Gutiérrez, and Brayan Galindo Amado were killed by drone-dropped explosives during combat operations. The drones employed fiber-optic guidance. This attack confirms that the fiber-optic technology first documented on February 11 has been operationalized into routine combat deployment — it is not a one-off demonstration but a functional combat capability being actively used across multiple ELN theaters.
At least ten drone-delivered explosive strikes disrupted the Aerocivil Santana radar station, knocking the installation offline and interrupting flight tracking and airspace control for the southwestern corridor — a critical air traffic management artery. Aerocivil formally classified the event as a "terrorist attack against essential civilian infrastructure." A separate drone with explosives was intercepted near the Cantón Militar José Hilario López in Popayán in coordination with this attack.
The pace of TTP evolution in this 90-day window is unprecedented within the Colombian context and warrants direct comparison to the Ukraine battlefield trajectory — the acknowledged inspiration source for multiple Colombian armed group commanders.
| Technology | Status (May 1, 2026) | Counter-Measure Effectiveness |
|---|---|---|
| Commercial DJI quadcopters (modified) | Baseline — still dominant numerically | RF jammers: effective; shooting: marginal |
| Homemade fixed-wing drones | Active in Cauca, Norte de Santander | RF jammers: effective |
| Fiber-optic guided drones | Confirmed operational (ELN) — Feb & Apr 2026 | RF jammers: INEFFECTIVE — no confirmed counter deployed |
| FPV kamikaze drones | Confirmed operational (ELN) — Feb 2026 | RF jammers: partially effective; hard-kill needed |
| Loudspeaker/psychological drones | Active (ELN, Catatumbo) | No kinetic counter required |
| AI-assisted mortar drop swarms | Training documented; operational use unconfirmed | Unknown — LOW confidence on full deployment |
| 3D-printed payload mechanisms | Confirmed in seized materials | Supply-chain disruption required |
The primary pattern across the reporting window is the northward and westward expansion of drone warfare beyond its original centers of gravity in Cauca and Norte de Santander. Antioquia — specifically the Norte Antioqueño subregion around Hidroituango — has emerged as a new high-risk zone. The April 21 Nariño incidents signal extension toward the Ecuador border corridor.
Urban proximity is the emergent risk. No confirmed drone strike has occurred within a major urban center during this period, but the Hidroituango threat demonstrates that groups are targeting systems that serve cities even when physical assets are rural. This is a meaningful doctrinal distinction.
Perhaps the most strategically significant finding of the period is the documented professionalization of drone pilot training. A clandestine drone school in the Filo Gringo corregimiento near El Tarra (Norte de Santander) is training pilots for AI-assisted mortar-drop swarm operations. Emilse Oviedo Sierra (alias 'la Abuela') is identified by Colombian authorities as the ELN's primary drone training coordinator, operating camps in Venezuela.
Recruitment actively targets adolescents through TikTok and rural schools, specifically seeking youth with gaming experience and remote control aptitude. Documented evidence shows coercive recruitment of minors. 3D printers are now being used to manufacture grenade-release clamps locally, eliminating import dependency for payload delivery mechanisms.
The cumulative toll since April 2024 stands at 53 uniformed personnel killed and 435 wounded across Army, Police, Navy, and Air Force. The pace has not decelerated in the Feb–May 2026 window. The more lasting damage to the security sector may be doctrinal rather than human: the confirmed failure of installed anti-drone systems against fiber-optic and FPV platforms has created a credibility gap for the military's counter-UAS posture. Officers in the field cannot rely on equipment designed for RF-guided threats. The Army's Drone Battalion, announced in late 2025, officially lacks both counter-UAS and offensive UAS operational capacity.
Infrastructure targeting generated two distinct risk categories. On energy security: the Hidroituango threats did not result in physical damage, but the credible threat against Colombia's largest hydroelectric project — and EPM extortion demands accompanied by video evidence of physical access — establishes the risk as structural, not speculative. On airspace management: the April 25 Aerocivil attack directly disrupted civil aviation in the southwestern corridor and establishes a precedent with significant insurance, regulatory, and foreign investment implications.
Local economic disruption — fuel station closures in Ituango, displacement of 125+ families in Segovia, ongoing commercial closures across Catatumbo municipalities — represents the cumulative drag on already-fragile rural economies, accelerating depopulation of communities that function as informal agricultural production zones.
The Catatumbo displacement crisis — 100,000+ families displaced over 15 months — is the largest internal displacement event in Colombia since peak FARC-era violence in the early 2000s. Drone operations are a material contributor: unlike landmines or ground-based armed actors that create discrete exclusion zones, drone threats are spatially unpredictable. Civilians have no behavioral adaptation that reliably protects them. The March 12 loudspeaker incident — 84 persons fled, 33 of them children, zero explosive payload deployed — illustrates this with precision.
The drone threat has become a central fault line in Colombian domestic politics. The public dispute between the Medellín Mayor, Antioquia Governor, and Army Commander over the Hidroituango threat assessment — civilian officials accusing the military of downplaying risk for political reasons — is illustrative of the governance fractures the security situation is creating. Internationally, a US House Appropriations Committee proposal to reduce Colombia military aid by approximately 50% (~USD 208 million) for 2025–2026 has been noted by analysts as potentially constraining the military's capacity to respond to the escalation.
Highest attack volume of any armed group. Abandoned peace negotiations in April 2024 and has since pursued an aggressive military posture. EMC-Mordisco accounts for 78% of nationally recorded armed clashes as of March 2026. Key drone structures: Columna Jaimé Martínez (Cauca/Valle corridor, April 25 radar attack), Frente 18 (Norte Antioqueño), Frente 36 under alias Carcá (Hidroituango zone). Frente 36 drone cell led by Neider Yesid Uñates López (alias Primo Gay) — former ELN member with explosives specialization who transferred tactical knowledge to the dissident structure.
Doctrine: Combined vehicle-drone operations dating to 2023. Progressive targeting escalation from military posts to economic infrastructure to civilian airspace management systems. A 5 billion peso (~USD 1.2M) bounty is active on Mordisco's capture.
Despite ranking third by volume, the ELN is unambiguously the most technologically sophisticated operator. Both the February 11 fiber-optic strike and the February 16 FPV attack are ELN operations. The ELN's training infrastructure — Venezuela-based camps coordinated by Emilse Oviedo Sierra and the Filo Gringo school in Catatumbo — suggests systematic capability investment rather than ad hoc adaptation.
The ELN operates a two-track drone doctrine: conventional military-grade attacks against the state (fiber-optic, FPV against Army installations) combined with non-kinetic population coercion (loudspeaker intimidation, displacement overflights) in areas of territorial control. Approximately 6,000 combatants. Concentrated in Catatumbo, Arauca, César, and the Cauca-Nariño Pacific corridor.
Second in cumulative volume. The March 19 Cantagallo training facility seizure confirms structural investment in pilot training and explosive payload development. Clan del Golfo operations are distinct in their primary criminal motivation — drug trafficking protection, territorial control against rivals — rather than ideological insurgency. Concentrated in the northern Caribbean corridor, southern Bolívar, and Antioquia conflict zones where they contest territory with FARC dissidents.
The Carcá faction (7 confirmed incidents, Antioquia focus, Frente 36 directly implicated in Hidroituango threats) and Los Pachenca (criminal band, Cesar/Magdalena) confirm that drone warfare technology has fully diffused into Colombia's mid-tier criminal ecosystem. The coexistence of negotiation posture at Carcá leadership level and active drone operations at the frente level reflects sub-group autonomy that complicates both peace process design and counter-insurgency targeting.
| Region / Department | Primary Actors | Risk Profile |
|---|---|---|
| Cauca | EMC-Mordisco (Jaimé Martínez), Carcá splinter | Highest historical attack density. Apr 25 radar attack confirms escalation toward infrastructure. Army 3rd Division has neutralized 2,500 drone attempts since 2025 but fiber-optic and FPV remain uncontained. |
| Norte de Santander (Catatumbo) | ELN, EMC Frente 33 | Humanitarian catastrophe zone. 100k+ displaced. Fiber-optic drone school in Filo Gringo. Most technologically advanced ELN operations in-country. Psychological drone operations confirmed March 2026. |
| Antioquia (Norte/Nordeste) | EMC Frente 36 (Carcá), Clan del Golfo | Emerging hotspot. Hidroituango a tier-1 national infrastructure risk. Civilian deaths in Segovia. Fuel supply disruption in Ituango. Election-period threat elevated. |
| Nariño / Ipialés corridor | ELN (Coordinadora Nacional Ejército Bolivariano) | Apr 21 triple fatality attack. Border corridor to Ecuador increases strategic sensitivity. Fiber-optic drone confirmed operational in this theater. |
| Sur de Bolívar / Magdalena Medio | Clan del Golfo, ELN | Drone training infrastructure (Cantagallo seizure). Helicopter strike left 14 soldiers wounded during reporting window. |
| Valle del Cauca / Greater Cali Corridor | EMC (Jaimé Martínez) | Military installation attacks in Cali, Palmira, Jamundí immediately preceded the Apr 25 radar strike. Deliberate escalation campaign pattern against regional security architecture. |
Formally launched January 9, 2026, fast-tracked following the December 18, 2025 ELN attack on Aguachica military base (6 killed, 31 wounded). Total investment: COP 6.3 trillion (~USD 1.68 billion) across multi-phase deployment, with COP 1 trillion authorized for Phase 1 in 2026. A broader CONPES security investment of COP 13 trillion was approved March 27, 2026.
Technical requirements specify RF detection within 2 km in under 10 seconds, hard-kill neutralization at minimum 800-meter standoff, platoon-level and fixed-installation deployment capability, and micro-Doppler sensors to reduce false positives. 41 firms from North America, Europe, and Asia are in competitive evaluation. Contract award targeted May 7, 2026.
The Army's dedicated Drone Battalion — announced late 2025 — officially lacks both counter-UAS and offensive UAS operational capacity. DroneShield jammers remain the primary deployed counter-UAS tool with demonstrably reduced effectiveness against new-generation platforms. Import restrictions on identified drone models represent the most cost-effective current counter, but sophisticated actors are manufacturing components domestically via 3D printing. Proposed legislation on a national drone registry and civilian drone strike terrorism classification had not been enacted as of the reporting window close.
Armed groups have introduced technology — fiber-optic guidance, FPV kamikaze systems — that the Colombian military's existing counter-UAS architecture cannot reliably defeat. The Escudo Nacional Antidrones will not be deployed and operationally effective before the May 31 election, and its design parameters may not fully account for fiber-optic threats.
The April 25 Aerocivil radar attack is the clearest signal that armed groups have made a deliberate strategic choice to extend targeting from military personnel toward the civilian and economic systems underpinning Colombian governance. This fits a visible pattern of escalation across the March–April incident cluster in Valle del Cauca, Antioquia, and Cauca.
Multiple armed groups have explicitly stated or operationally signaled intent to disrupt the May 31 electoral cycle. Infrastructure targeting of the energy grid and airspace management before this date is consistent with stated objectives. The probability of at least one high-profile drone incident in the 30 days following this report's close is assessed as HIGH.
The Clan del Golfo's Cantagallo facility and the adoption by Los Pachenca confirm that drone warfare has moved from ideological insurgents to purely criminal networks. As commercial platforms and 3D-printed components lower production costs, and as TikTok-recruited adolescent pilots lower human capital costs, the barrier to entry for any armed group approaches zero.
ELN training infrastructure operates openly in Venezuelan territory. The Emilse Oviedo Sierra network coordinates cross-border pilot development. Any comprehensive counter-drone strategy that does not address the cross-border training pipeline will face an unlimited regeneration problem on the capability side.