Cyberattacks Disrupt Moroccan Government Websites: Experts Point to Algerian Involvement and "Digital Militias"

Rabat, April 13, 2025 – A wave of cyberattacks struck multiple Moroccan government websites late Saturday evening and into Sunday morning, April 12-13, 2025, causing temporary disruptions and ongoing outages. The targeted sites include the Delegate Ministry to the Head of Government in charge of Relations with Parliament, the Ministry of Agriculture, Maritime Fisheries, Rural Development and Water and Forests, and the Tax Directorate, as reported by Hespress. Cybersecurity experts have identified the attacks as Distributed Denial of Service (DDoS) operations, accusing Algerian entities of orchestrating a sophisticated campaign that could threaten Morocco’s digital sovereignty.

Nature and Impact of the Attacks

Hassan Khourouj, a cybersecurity and digital systems expert, classified the attacks as DDoS, explaining that hackers orchestrate a simultaneous assault from multiple computers to overwhelm a website’s capacity, leading to slowdowns or complete shutdowns. While most Moroccan government websites remained operational, the Ministry of Agriculture and the Ministry of Economic Inclusion, Small Business, Employment and Skills (MIEPEEC) experienced persistent outages, with other sectors reporting server slowdowns [Hespress].

Khourouj warned that prolonged attacks could harm the search engine rankings of Moroccan websites on platforms like Google, emphasizing the need for robust backups to mitigate such disruptions. He described the attacks as part of a “Kill Chain” strategy, where a successful database breach is followed by a service denial phase to open multiple fronts simultaneously.

Accusations of Algerian Involvement

Both Khourouj and fellow cybersecurity expert Tayeb El Hazzaz directly attributed the attacks to Algerian entities, framing them as a calculated escalation in the ongoing cyber rivalry between Morocco and Algeria. Khourouj called the operation “very dangerous,” noting its timing late at night when technical teams are off duty, a tactic he believes reflects a “well-crafted plan.” El Hazzaz went further, labeling the attackers an “international digital militia exploited by Algeria to attack Morocco,” claiming they aimed to disrupt services for 15 days [Hespress].

This wave follows a series of cyber incidents between the two nations. On April 8, 2025, an Algerian hacking group, “Jabaroot,” claimed responsibility for breaching Morocco’s National Social Security Fund (CNSS) and the MIEPEEC website, leaking sensitive data in retaliation for alleged Moroccan harassment of Algerian social media pages [Web ID: 14] [Web ID: 16]. Moroccan hackers, including “Phantom Atlas” and “OPx005,” responded with counterattacks, targeting Algerian government institutions like the Ministry of Labor and executing large-scale DDoS attacks on sites such as the Algerian Prime Minister’s office and Ministry of Defense [Web ID: 11] [Web ID: 12].

Broader Context and Regional Tensions

The cyberattacks coincide with heightened geopolitical friction between Morocco and Algeria, exacerbated by the Western Sahara dispute. On April 8, 2025, the U.S. reaffirmed its support for Morocco’s autonomy plan for Western Sahara, a stance Algeria opposes as it backs the Polisario Front’s push for self-determination [Web ID: 10] [Web ID: 13]. Moroccan government spokesperson Mustapha Baitas linked the cyberattacks to this diplomatic development, suggesting they reflect Algeria’s frustration with growing international support for Morocco’s position [Web ID: 10].

The cyber skirmishes are part of a long-standing digital conflict. Historical incidents, such as Moroccan hackers targeting Algerian government websites in 2010 after the Gdim Izik events, illustrate how cyberwarfare often mirrors political flashpoints [Web ID: 15]. The current attacks, however, are notable for their scale and coordination, raising concerns about their potential to disrupt essential services during peak hours.

Expert Warnings and Recommendations

El Hazzaz, who witnessed the attacks on multiple government websites, warned of their severity, stating they could undermine Morocco’s digital sovereignty. He predicted a strong response from Moroccan hackers, signaling an intensifying cyber war. To counter the threat, El Hazzaz urged a comprehensive strategy: leveraging the expertise of security and military agencies, conducting a full inventory of official websites, and addressing vulnerabilities with advanced server technology [Hespress].

The MIEPEEC, in a statement to Hespress, confirmed its website was targeted but clarified that the site contains only publicly accessible information. It remains unclear whether the ongoing outage is linked to the April 8 breach or the latest DDoS attack.

Analysis and Implications

The accusations of Algerian involvement, while serious, lack official confirmation from Moroccan authorities as of April 13, 2025. The timing of the attacks, following diplomatic wins for Morocco, supports the narrative of retaliation, but the absence of concrete evidence leaves room for skepticism. The involvement of “digital militias” suggests a new dimension to the conflict, where state-backed or ideologically driven groups could amplify regional rivalries in cyberspace.

The potential for these attacks to target critical services underscores the broader risk to Morocco’s digital infrastructure. As seen in recent global cyber incidents—like the ransomware attack on Charlton Athletic in August 2024—such breaches can have significant operational and financial impacts [Web ID: 6]. Morocco’s push to export medical cannabis, as reported on April 10, 2025, highlights the need for secure digital systems to support emerging industries [prior conversation].

Conclusion

The latest cyberattacks on Moroccan government websites mark a dangerous escalation in the Morocco-Algeria cyber rivalry, with experts pointing to Algerian entities as the culprits. As both nations trade digital blows, the involvement of “digital militias” and the targeting of essential services raise alarms about the stability of Morocco’s digital landscape. Immediate action to bolster cybersecurity, as recommended by experts, is crucial to safeguard national interests amid this evolving threat.