Tags: Morocco, DGED, DGST, Jabaroot,
As Morocco enters an uncertain political phase, a group of hackers named Jabaroot is shaking the kingdom’s balance of power. Behind an Algerian façade quickly abandoned, this large-scale digital operation is targeting the internal machinery of power, exposing opaque practices and hidden fortunes. A cyberwar that seems less foreign than internal — and one that could well reshape the contours of the post-Mohammed VI era.
Since the beginning of 2025, the mysterious hacker group Jabaroot DZ has burst onto the North African digital scene by orchestrating a series of massive leaks targeting Moroccan institutions and dignitaries. The choice of the domain name dz and references to a “response” to Moroccan hacking operations — including the breach of the X (formerly Twitter) account of the APS agency — initially suggested it was an Algerian group. But as the revelations multiplied and grew in scale, this supposed Algerian origin became less and less credible. The reading of the leaked data and the selected targets instead reinforces the idea of an inside operation, disguised as an external cyberwar, aiming to weaken certain pillars of the regime without ever touching its monarchical core.
Institutions Exposed
Observers have noted that Jabaroot has stopped using the dz extension, as if tacitly acknowledging its Moroccan identity. It is no coincidence that these revelations, which are sending shockwaves through the Makhzen elite — and beyond — come at a time described as the “end of reign” of Mohammed VI. To suggest that these leaks are designed to weigh on the future composition of the next king’s inner circle is only a short step — one many are already taking. The unprecedented scope of Jabaroot’s leaks, which have targeted both institutions and dignitaries, tends to confirm this.
The central organs of Morocco’s administration were targeted. The CNSS (National Social Security Fund) saw more than 53,000 files published, revealing the salaries of nearly 2 million employees and the data of 500,000 companies. The Ministry of Employment, the Ministry of Agriculture, and the Ministry for Relations with Parliament were also hit, with internal documents exposing bonuses, contracts, and financial schemes.
The Order of Notaries saw several terabytes of data exfiltrated, particularly regarding real estate transactions and hidden assets.
Hidden Fortunes and Questionable Enrichment
It is the upper echelons of the Makhzen that have been exposed, with revelations about fortunes amassed by top officials on the sidelines of their official duties. An explosive cyber-dossier reveals opaque financial schemes, luxury real estate acquisitions, and fictitious salaries paid out by public institutions.
Although the king and his family have so far been spared, the salary of his private secretary, Mohamed Mounir El Majidi, raises eyebrows. This royal financial manager is said to receive a monthly salary of 1.3 million dirhams (€120,000) from the CNSS — far above administrative standards. Since 2003, his fortune is estimated to have reached 185 million dirhams (€18.5 million), thanks to real estate investments and palace-linked companies.
Mohamed Raji, a key figure in domestic intelligence (DGST), is nicknamed “Mr. Wiretap” for his role in the kingdom’s digital surveillance. Officially paid 25,000 dirhams/month (€2,300), he is reported to have acquired an industrial zone in Béni Mellal for 30 million dirhams (€2.8 million). According to Jabaroot’s documents, he collected commissions on espionage contracts with European countries and invested in shell companies in France to conceal his assets.
Abderrahim Hamidine, head of the DST in Casablanca, is reported to have purchased a villa with a swimming pool in the upscale California district. The cost of the property is blatantly incompatible with his status as a civil servant. The leaks point to personal enrichment through embezzlement and political favors.
Abdellatif Ouahbi, the Minister of Justice, downplayed Jabaroot’s warnings about corruption in the judicial sector. In response, Jabaroot directly accused him of passive complicity and of shielding a rotten system — releasing embarrassing internal documents as proof.
An “Uncontrollable” Security Apparatus
These revelations unfold against the backdrop of a power struggle between the DGED and the DGST, Morocco’s two intelligence pillars. The defection of Mehdi Hijaouy, a former DGED executive who sought refuge in Spain before disappearing after failing to secure guarantees, triggered a purge led by Abdellatif Hammouchi, head of the DGST. Dozens of arrests followed, targeting Hijaouy’s associates, accused of holding explosive secrets about the regime.
Jabaroot — now without dz — drew political conclusions from its leaks:
“The worn-out security apparatus that is supposed to protect Morocco is nothing more than an uncontrollable tool meant to shield the corrupt, silence voices, and sell the kingdom’s secrets at bargain prices — jeopardizing Morocco’s future.”