NarcoWatch - 4 March 2026

The death of Cártel Jalisco Nueva Generación (CJNG) leader Nemesio “El Mencho” Oseguera Cervantes during a military operation in Jalisco triggered an unprecedented wave of retaliatory violence across 20 Mexican states, including a sophisticated disinformation campaign designed to sow panic [7, 8, 13, 17]. In the wake of this decapitation strike, Mexican authorities have continued to target the leadership of major drug trafficking organizations (DTOs), capturing key regional commanders and financial operators from both CJNG and the Gulf Cartel [4, 7, 10, 13]. Concurrently, a major international operation involving Europol dismantled a cocaine trafficking network linking Ecuador's Los Lobos cartel to Albanian organized crime, highlighting the global reach and complex alliances of groups that supply Mexican DTOs [1, 2]. These events signal a period of significant volatility, with the potential for violent succession struggles within CJNG and continued pressure from authorities on DTO command structures.

Significant Incidents and Articles of Interest

• Death of CJNG Leader 'El Mencho' Sparks Unprecedented Retaliation – Tapalpa, Jalisco & 20 Mexican States: On February 22, Nemesio Oseguera Cervantes, alias “El Mencho,” was killed during an operation by the Mexican military [7, 13]. His death ignited a massive, coordinated retaliation by CJNG, which established 252 roadblocks and conducted arson attacks on vehicles, businesses, and banks across 20 states [17]. The wave of violence resulted in more than 70 fatalities, including 42 alleged cartel members and 25 National Guardsmen [8, 17]. The physical attacks were amplified by a sophisticated disinformation campaign on social media, using a mix of real, fake, and AI-generated images to create a nationwide perception of chaos and terror [8, 17]. The killing creates a significant leadership vacuum within Mexico's most powerful cartel, likely triggering a violent succession struggle among potential heirs, while the scale of the retaliation demonstrates CJNG's formidable operational capacity and its evolving use of information warfare [9, 17].

• Major Cocaine Trafficking Network Linked to Los Lobos Cartel Dismantled – Ecuador, Belgium, Netherlands: An international law enforcement operation supported by Europol and the U.S. DEA dismantled a large-scale cocaine trafficking network connected to the Ecuadorian ‘Los Lobos’ cartel, a known partner of CJNG [1, 2]. The operation, which began in January 2025, culminated in 16 arrests, including a High-Value Target, and 26 house searches across Ecuador, Belgium, and the Netherlands. Leading up to the action day, authorities had seized over seven tonnes of cocaine linked to the network, which used fruit-exporting companies as a cover, concealing drugs within refrigerated containers. The investigation revealed the Ecuadorian network was cooperating directly with an Albanian drug trafficking organization to move shipments into Europe [1]. This operation underscores the critical role of Ecuadorian DTOs as transnational facilitators for both Mexican and European organized crime, leveraging legitimate commercial logistics to supply the European cocaine market [1, 2].

• High-Level Operators from CJNG and Gulf Cartel Captured – Tlaxcala, Tamaulipas, Colima, Michoacán: Following El Mencho's death, Mexican authorities have conducted several high-impact arrests targeting DTO leadership. On February 25, forces captured Isaac "El Hacha" Moreno Romero, a CJNG regional leader operating in Tlaxcala and Nayarit [7]. A day later, a joint operation in Matamoros, Tamaulipas, resulted in the arrest of Antonio "El Lexus" Guadalupe "N", a top-10 FBI fugitive and leader of the Gulf Cartel's "Operativa Ranger" cell, along with eight of his subordinates [10]. Also on February 26, authorities in Colima arrested Arturo “El Salsas” “N”, a key CJNG financial operator responsible for managing and moving the organization's funds [13]. Finally, on March 2, authorities in Michoacán arrested Gerardo "El Congo" "N," a CJNG cell leader linked to the November 2025 assassination of the mayor of Uruapan and the extortion of local avocado and lime producers [4]. These targeted captures reflect a sustained effort to disrupt DTO command-and-control structures, though they may also incite localized power struggles.

• Persistent Violence Against Security Forces and Civilians – Colima & Sinaloa: Cartel violence continues to target both state security forces and civilians. On February 27, CJNG sicarios ambushed a unit of the Colima State Police in Coquimatlán, killing one officer and injuring another [15]. Two days earlier, on February 25 in Culiacán, Sinaloa, hitmen assassinated Julio César Beltrán, an accordionist for the musical group Grupo Arraigado [6]. The band is known for performing "corridos" (ballads) that allude to "La Mayiza," a faction of the Sinaloa Cartel, suggesting the murder was related to ongoing intra-cartel rivalries [6]. These incidents highlight the persistent high-risk environment for law enforcement in contested territories and the targeting of individuals perceived to be aligned with rival criminal factions.

DTO Activity and Tactics

DTO(s): Cártel Jalisco Nueva Generación (CJNG), Gulf Cartel, Sinaloa Cartel, Los Lobos (Ecuador)

New or Adapted Tactics:

• Hybrid Warfare and Information Operations: CJNG's response to El Mencho's death showcased an advanced propaganda capability. The cartel launched a large-scale disinformation campaign using a mix of real imagery of roadblocks, fake news reports, and AI-generated content (e.g., a burning commercial plane, a church on fire) to amplify fear, create a perception of nationwide chaos, and manipulate social media algorithms [8, 17].

• Coordinated, Multi-State Retaliation: CJNG demonstrated an unprecedented ability to orchestrate 252 roadblocks and attacks across 20 different states simultaneously in response to the killing of its leader. This reflects a highly sophisticated command-and-control and logistical structure [17].

• Transnational Criminal Alliances: Ecuadorian cartels like Los Lobos are deepening partnerships with both Mexican (CJNG) and European (Albanian) DTOs to manage the logistics of large-scale cocaine shipments to Europe. This strategy leverages legitimate commercial enterprises, such as fruit exporters, to conceal illicit cargo [1, 2].

• Exploitation and Internal Corruption: CJNG leveraged a city official's drug addiction to obtain the itinerary of Uruapan's mayor, Carlos Manzo, facilitating his assassination. The official was allegedly given drugs in exchange for the information [4].

• Maritime Extraction of Detainees: To counter the threat of ambushes and roadblocks following arrests in Puerto Vallarta, the Mexican Navy (SEMAR) used a maritime patrol vessel to transport high-risk CJNG detainees to a secure location in a different state [14].

Geographic Trends:

• Ecuador as a Key Transit Hub: Ecuador’s Pacific ports are central logistics hubs for cocaine moving from Colombia toward Central America, Mexico, and Europe. Both the Sinaloa Cartel and CJNG rely on alliances with local Ecuadorian gangs like Los Choneros and Los Lobos to manage transportation, storage, and export [1, 2].

• Guatemala as a Strategic Corridor: Mexican DTOs, including CJNG, continue to forge alliances with local Guatemalan trafficking networks to control the flow of cocaine moving north across Mexico's southern border [2].

• CJNG’s Widespread National Presence: Recent law enforcement actions confirm CJNG's operational presence across Mexico. Security forces have captured or clashed with CJNG cells in the cartel's traditional strongholds of Jalisco [5, 9, 14] and Colima [13, 15], as well as in central Mexico (Tlaxcala) [7] and southern Mexico (Chiapas) [11].

• U.S.-Mexico Border Surveillance Posts: Cartels continue to deploy scouts in remote, strategic locations to monitor law enforcement. A suspected cartel scout was recently arrested in a mountain hideout in the Arizona desert, where he was using solar-powered electronics to conduct surveillance for a human smuggling organization [12].

Targeting Trends:

• Security Forces: Law enforcement and military personnel are primary targets. CJNG ambushed state police in Colima [15], issued direct threats against authorities in Chiapas [11], and killed 25 National Guardsmen during the nationwide retaliation for El Mencho’s death [17].

• Public Officials: CJNG continues to assassinate political figures who oppose its operations. The cartel is linked to the murder of Uruapan Mayor Carlos Manzo and reportedly offered a reward of nearly $35,000 for his killing [4].

• Economic Extortion: CJNG cells are actively engaged in extorting key agricultural sectors. The cell led by "El Congo" in Michoacán was responsible for extorting local avocado and lime producers [4].

• Civilians and Cultural Figures: The targeted assassination of a musician in Culiacán, whose band produced content favorable to a Sinaloa Cartel faction, demonstrates that individuals publicly perceived to be aligned with rival groups remain vulnerable targets [6].

Indicators to Watch

• CJNG Leadership Succession: Monitor for signs of a violent succession battle within CJNG, including increased intra-cartel killings, fragmentation, or the emergence of new leaders such as Hugo Gonzalo Mendoza Gaytan ("El Sapo"), Juan Carlos Valencia Gonzalez ("El 3"), or Audias Flores Silva ("El Jardinero").

• Escalation of Information Warfare: Watch for the increased use of AI-generated content and coordinated social media campaigns by DTOs to sow panic, discredit authorities, or incite violence during security operations.

• Shifts in Transnational Alliances: Track evolving partnerships between Mexican cartels and their counterparts in South America (e.g., Los Lobos) and Europe (e.g., Albanian DTOs), particularly in key transit hubs like Ecuador.

• Retaliatory Attacks on State Actors: Expect continued, and possibly intensified, attacks against law enforcement and military personnel in CJNG strongholds like Jalisco, Colima, and Michoacán following the death of "El Mencho".

• Targeting of Economic and "Soft" Targets: Monitor for increased targeting of civilians, cultural figures, and key economic sectors (e.g., agricultural producers) as a method of intimidation, extortion, or reprisal against perceived rivals.