Algerian hackers wage cyber war on Morocco in unprecedented data breach

Morocco is reeling from its worst-ever cyberattack campaign, with Algerian hacking collective JabaR00T infiltrating critical institutions and leaking sensitive national data. 

The Moroccan Ministry of Employment’s official website was taken offline after hackers replaced its landing page with an unauthorized image. And the National Social Security Fund also suffered a major data breach.

The leaked data—reportedly disseminated via Telegram to thousands of users—includes highly confidential details such as salaries, annual bonuses, and employment records. 

A forum dedicated to cybercrime discussions recently featured a post claiming that Algerian hackers breached Oracle's LDAP and SSO systems. The attackers allegedly obtained files containing passwords, encryption keys, access credentials, and security certificates, compromising about 140,000 accounts linked to Moroccan customers.

The breach exposed domain names associated with a broad spectrum of Moroccan entities, including those in banking, government, academia, industry, port authorities, telecommunications, and technology sectors.

Among other high-profile targets were the Mohammed VI Investment Fund, Crédit du Maroc bank, Banque Centrale Populaire, and Siger - the royal family's investment arm. 

The hackers claim the attack retaliates against Morocco's alleged suppression of Algerian state media on social platforms.