The ongoing cyber war between Morocco and Algeria has intensified with a dramatic counterattack from a group of Moroccan hackers. In response to the breach of Morocco’s National Social Security Fund (CNSS), a collective of Moroccan hackers infiltrated the Algerian Social Security Fund for Postal and Telecommunications Workers (MGPTT), leaking 13 GB of sensitive data, including personal ID numbers, money transfer orders, and internal documents. The breach occurred overnight between April 9 and 10, marking a significant escalation in the digital conflict between the two nations.
The group, operating under aliases such as “Phantom Atlas,” “Phantom Morocco,” and “Moroccan Cyber Forces,” claimed responsibility for the attack via Telegram, framing it as direct retaliation for previous hacks targeting Morocco. The hackers asserted they infiltrated the MGPTT’s systems in less than 24 hours, accessing critical personal information and classified government documents, including those from Algeria’s Ministry of Labor.
In their manifesto, the Moroccan hackers issued a stark warning: “This is a direct and calculated response to the CNSS breach… Any future provocation will be met with a targeted and disproportionate response.” They further emphasized their political stance, making it clear that the issue of the Moroccan Sahara is non-negotiable, positioning the attack as both a technological and geopolitical message.
Cybersecurity expert Saxx, monitoring the escalating digital conflict, confirmed the breach’s severity. He noted the ease with which attackers can exploit vulnerabilities in Algeria’s cybersecurity systems, particularly highlighting the use of compromised employee accounts to launch attacks. Saxx also pointed to systemic flaws within Algeria’s cybersecurity infrastructure, which were exploited during this breach.
This latest attack signals a dangerous escalation in the digital shadow war between Morocco and Algeria. The escalating attacks, growing sophistication, and politically charged nature of the breaches are blurring the lines between cyberactivism and cyberwarfare. The cycle of retaliation appears to be spiraling out of control, raising concerns about the future of cyber conflict in the region.
As of now, both the Moroccan and Algerian governments have remained silent on the issue, despite the growing tensions online. In Morocco, the head of the National Commission for the Control of Personal Data Protection has made comments, but the General Directorate of Information Systems Security (DGSII) has yet to issue an official statement.
