‘Face the Consequences': Moroccan Hackers Strike Back at Algerian Targets
Doha – A Moroccan hacking group called 'Phantom Atlas' has claimed responsibility for launching retaliatory cyberattacks against Algerian government institutions, following a hostile data breach at Morocco's National Social Security Fund (CNSS) by Algerian hackers.
In a message posted on Telegram yesterday, Phantom Atlas announced they had successfully breached the internal systems of Algeria's General Post and Telecommunications Corporation (MGPTT) within 24 hours of the CNSS attack.
The group claimed to have extracted 'over 13 gigabytes of confidential files' containing personal data and 'highly sensitive strategic documents,' with some reports suggesting the stolen data could reach up to 20 gigabytes.
'We are observing. We are capable. Any future act of provocation will be met with a targeted and disproportionate response,' the group warned in their statement, directly addressing the Algerian government.
The Moroccan hackers also claimed to have penetrated the Algerian Ministry of Labor's systems, stating they uncovered documents revealing 'deep structural flaws and chronic mismanagement within key state institutions.'
Phantom Atlas made an explicit reference to the Western Sahara dispute: 'The Moroccan Sahara is not up for debate. It will remain under full Moroccan sovereignty. Morocco will never relinquish a single inch.'
Following attempts by MGPTT Director General Zekri Mahmoud to downplay the breach, they further cautioned this morning: 'To those hiding behind false slogans and trying to mask their failure – the recent leaks are not a simple incident, they are an indirect message. Your attempts to minimize this event will not go unnoticed.'
In a parallel operation, another Moroccan entity identified as 'OPx005' reported executing a large-scale DDoS attack that successfully disrupted multiple Algerian government websites, including those of the Prime Minister's office, Ministry of Foreign Affairs, Ministry of Interior, and Ministry of Defense.
CNSS breach exposes millions of Moroccan employee records
The counterattacks came after the Algerian hacking group 'Jabaroot' breached CNSS systems, reportedly exposing personal data of nearly 2 million Moroccan employees across approximately 500,000 businesses.
The leaked documents allegedly included salary certificates and employee lists from various organizations, including the royal holding SIGER and the Israeli liaison office in Rabat.
In an official statement Wednesday, CNSS acknowledged the breach but claimed that preliminary verification showed the leaked documents were 'often false, inaccurate or truncated.'
The institution confirmed its computer system had been targeted by 'a series of cyberattacks aimed at circumventing security measures.'
'As soon as the data leak was observed, the IT security protocol was activated with corrective measures that contained the path used and strengthened infrastructures,' CNSS stated, adding that measures have been implemented to identify the affected data precisely.
In response, Jabaroot released personal information of CNSS Director General Hassan Boubrik and challenged the institution: 'We are ready to apologize and withdraw all published data if CNSS can prove that even a single document in the leak is false, particularly regarding senior officials' salaries.'
The incident has drawn attention from political figures, with Abdellah Bouanou, head of the Justice and Development Party's (PJD) parliamentary group, calling for enhanced cybersecurity measures across ministerial sectors and public institutions.
The Algerian hackers claimed their initial attack was in retaliation for alleged 'Moroccan harassment of official Algerian social media pages,' specifically citing the suspension of the Algerian Press Service (APS) account on the social media platform X.
Meanwhile, Phantom Atlas concluded their message with a stern warning. 'This is not merely a cyberattack. It is a message of deterrence and defiance. We will not remain silent in the face of aggression,' they vowed.
'Every hostile act against Morocco, its people, or its sovereignty will be answered. This is a show of force, resilience, and strategic reach. You underestimated us. Now you are witnessing the consequences.'
Who is behind the CNSS breach?
A subsequent investigation by Moroccan cybersecurity researchers into the Jabaroot breach uncovered what experts described as a 'Bad OpSec' (Bad Operational Security) mistake that exposed the attacker's identity.
The error occurred when Jabaroot initially forwarded messages from a personal Telegram account with the handle '3N16M4' instead of posting directly to their channel.
Though the messages were quickly deleted and reposted without the forwarding tag, Moroccan researchers had already captured the digital trail.
The investigation traced the handle to a GitHub account belonging to a security engineer named Rachid Mzannar, currently residing in Bochum, Germany.
While the Jabaroot group claimed Algerian origins, forensic analysis of CTF (Capture The Flag) competition records suggested the individual behind the handle was actually from Tunisia.
The investigation team, comprising researchers Edd13Mora, Jakom, 0xPwny, C3poD4Y, ZeroMemoryEx, Tea, and Farisi, noted that while these findings raise questions about the attack's true origins, they remain preliminary and require further verification. Tags: cyberattacksMoroccan hackersThe National Social Security Fund (CNSS)
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Ya Biladi
7 hours ago
- Ya Biladi
Algerian Minister sparks controversy, accuses Morocco of «stealing» couscous heritage
Algeria's Minister of Communication, Mohamed Meziane, has reignited the long-running debate over the origins of couscous. Speaking before the House of Representatives yesterday, he accused «the western neighbor» of «stealing» the iconic traditional dish from Algeria. According to Meziane, «all ancient historians agree that couscous, along with its utensils, first appeared in Algeria», though he offered no evidence to support the claim. He also refrained from naming the author of what he described as an «important study» from «the beginning of the last century» that allegedly proves Algeria's national ownership of couscous. He simply noted that the study was written by a «French historian». «This is just one example among many other products whose ownership has been unfairly attributed to the western neighbor», he said. Meziane also claimed, in front of the deputies, that Morocco «took advantage of the black decade (1992–2000) to appropriate symbols of Algerian heritage, including music and architecture». For context, couscous was officially recognized by UNESCO as part of the Intangible Cultural Heritage of Humanity in 2020, following a joint submission by Morocco, Algeria, Mauritania, and Tunisia. Mohamed Meziane was appointed Minister of Communication in November 2024, replacing Mohamed Laâgab, who held the post for just 13 months.
Ya Biladi
7 hours ago
- Ya Biladi
Is Algeria using Polisario Front members to shield Kaïs Saïed's regime ?
The Polisario Front was recently the subject of a phone conversation between Algerian President Abdelmadjid Tebboune and his Tunisian counterpart Kaïs Saïed, held during Eid al-Adha. In this exchange, Tebboune reportedly asked Saïed «to host certain personalities from the Polisario Front currently living in the Tindouf camps», according to the weekly Jeune Afrique. Several leaks further suggest the presence of Polisario officials in Tunisia. Since Saïed's ascent to power on July 25, 2021, Tunisia has notably abandoned its long-standing neutral stance on the Western Sahara issue, a position maintained since the era of Habib Bourguiba. This policy shift was underscored by Saïed's reception of Brahim Ghali, the Polisario leader, at Tunis airport during a Japan-Africa summit in August 2022, as well as Tunisia's abstention during a UN Security Council resolution vote on the Sahara in October 2022. In apparent reciprocity, Algeria has provided significant financial support to Tunisia through loans and donations, particularly in December 2022 and March 2023. The Algerian company Sonelgaz also contributes to supporting its Tunisian ally by supplying electricity and gas. Ensuring the Longevity of the Saïed Regime A Moroccan source, speaking to Yabiladi, confirmed Jeune Afrique's information regarding Tebboune's request, stating that «for the past two or three months, dozens of Polisario members have entered Tunisia with Algerian passports». Our source elaborated, «Their mission is to protect the Tunisian regime against a potential revolution or coup, especially as protests against Saïed's decisions are gaining momentum, threatening the regime's stability. Algeria does not want to lose another ally in the region, especially after the fall of Bashar Al-Assad in Syria and the retreat of the national unity government forces in Libya in the face of Khalifa Haftar's advance». The source emphasized the strategic importance for Algeria: «Saïed's regime is Algeria's last declared ally in North Africa and the Sahel. Mauritania, for its part, has distanced itself from Algerian projects and has decided to put an end to the Polisario's border violations. In this context, the survival of the Tunisian regime is crucial for Algeria, as protests against Saïed multiply». It is worth noting that the majority of senior Polisario officials hold Spanish or Mauritanian nationality. As a historical reminder, Polisario elements, with Algeria's support, have previously fought alongside the armies of Muammar Gaddafi and Bashar Al-Assad. However, these reinforcements did not prevent the eventual fall of those regimes.
Ya Biladi
11 hours ago
- Ya Biladi
Algerian Minister sparks controversy, accuses Morocco of «stealing» couscous heritage
Algeria's Minister of Communication, Mohamed Meziane, has reignited the long-running debate over the origins of couscous. Speaking before the House of Representatives yesterday, he accused «the western neighbor» of «stealing» the iconic traditional dish from Algeria. According to Meziane, «all ancient historians agree that couscous, along with its utensils, first appeared in Algeria», though he offered no evidence to support the claim. He also refrained from naming the author of what he described as an «important study» from «the beginning of the last century» that allegedly proves Algeria's national ownership of couscous. He simply noted that the study was written by a «French historian». «This is just one example among many other products whose ownership has been unfairly attributed to the western neighbor», he said. Meziane also claimed, in front of the deputies, that Morocco «took advantage of the black decade (1992–2000) to appropriate symbols of Algerian heritage, including music and architecture». For context, couscous was officially recognized by UNESCO as part of the Intangible Cultural Heritage of Humanity in 2020, following a joint submission by Morocco, Algeria, Mauritania, and Tunisia. Mohamed Meziane was appointed Minister of Communication in November 2024, replacing Mohamed Laâgab, who held the post for just 13 months.
