A recent international report by Hackmanac, a platform specializing in cyber threat analysis, revealed that Morocco has become one of the most targeted countries worldwide by cyberattacks.
Morocco recorded 27 cyberattacks between June 4 and June 10, 2025, placing it third globally behind Italy (44 attacks) and the United States (43 attacks). This figure marks a sharp rise compared to May, when only 14 attacks were recorded—almost double within one month.
On the continental level, Morocco leads the list of African countries targeted by cyberattacks, far ahead of South Africa, which recorded only two attacks during the same period. The report noted no major cyberattacks in other African countries, confirming Morocco’s position as the primary target on the continent.
The report highlights increasing vulnerability in Morocco’s digital infrastructure, with ministries, military institutions, and security agencies among the most targeted sectors. This reflects a worrying global trend in cybersecurity threats.
Hackmanac also reported 218 cyberattacks across 34 countries in June, including 26 critical attacks (12% of the total). Nearly 16.6 terabytes of sensitive data were compromised, underscoring the scale of exploited vulnerabilities.
Most attacks observed last week were attributed to the group NoName057(16), active on both the clear and dark web. The group claimed responsibility for 46 intrusions, primarily targeting public infrastructure.
Since April, several Moroccan institutions have been targeted, including the National Social Security Fund (CNSS) and the Ministries of Agriculture and Employment. Recently, a group called JabaRoot DZ claimed to have hacked the Ministry of Justice, revealing sensitive data about judges and officials. However, authorities officially denied any breach, assuring that no vulnerabilities were detected.
In light of the escalating attacks and increasing sophistication of threat actors, Moroccan authorities are urged to urgently reinforce their cybersecurity capabilities. The frequency of targeted offensives, the severity of losses, and the sensitivity of the affected sectors demand a swift, strategic, and regional response to protect critical infrastructure and safeguard sensitive information.