MIPA Warns Morocco’s Digital Growth Fuels Cyber Threats

The Moroccan Institute for Policy Analysis (MIPA) has cautioned that Morocco’s increasing digital footprint and reliance on information technology are heightening its vulnerability to cyber threats, describing the country as an increasingly fertile and fruitful ground for cyberattacks. 

According to the Moroccan government friendly Hespress on April 20th, this warning comes in the wake of a series of cyberattacks, reportedly carried out by Algerian hackers, which targeted the CNSS (National Social Security Fund) and other Moroccan institutions.  

Government spokesperson Mustapha Baitas attributed the breaches to “hostile actors” provoked by Morocco’s growing diplomatic traction on the Western Sahara issue.  

The timing of these attacks aligned with the United States reaffirming its recognition of Moroccan sovereignty over the disputed territory—an event Baitas hailed as a “major diplomatic victory.” 

In its report titled “Cybersecurity in Morocco: Between Achievements and Challenges,” MIPA outlined how geopolitical tensions are increasingly motivating hostile cyber actors to target Morocco’s government with cyber threats.  

At the same time, the country’s expanding economy and maturing digital infrastructure are becoming attractive to financially driven cybercriminals and those seeking intellectual property. 

The report also underlined the impact of ongoing regional instability, noting that cyber attackers are exploiting digital vulnerabilities for strategic advantage.

It raised particular concern about the threat of state-sponsored cyber-espionage aimed at public institutions and businesses, alongside opportunistic attacks driven purely by profit. 

Citing the 2022 African Cyber-Threat Assessment Report by Interpol, MIPA revealed that Morocco had recorded the highest number of attacks by banking trojans and stealer malware on the continent, totalling 18,827 incidents.  

This figure places Morocco ahead of both South Africa and Nigeria, marking it as a top target.  

The report also referenced a series of significant cyber incidents that have affected the country since 2012. 

In light of the increasing scale and sophistication of cyberattacks, the report stressed that Morocco must remain in a state of continuous adaptation.  

This includes aligning its cybersecurity practices with international standards and investing consistently in both technological infrastructure and human resources. Stronger national and international cooperation is also deemed essential to building a resilient cybersecurity framework. 

However, the report identified several critical challenges that need urgent attention.  

Chief among these is a widespread lack of awareness and education around cybersecurity, which leads to lax practices and leaves systems exposed.  

The shortage of skilled cybersecurity professionals further compounds the issue, as does the limited financial capacity of many small and medium-sized enterprises (SMEs) and public institutions to invest in advanced security systems. 

Moreover, regulatory shortcomings are hindering progress, MIPA argued.  

The existing legal framework is marked by incomplete legislation, inadequate punitive measures, and insufficient harmonisation with global standards. 

To overcome these obstacles, the report advocates for a comprehensive, multi-stakeholder approach that engages individuals, businesses, government agencies, and cybersecurity experts.  

By cultivating a robust culture of cybersecurity awareness and responsibility, Morocco can bolster the protection of its critical infrastructure and reduce its exposure to a wide range of cyber threats. 

MIPA concluded that education, collaboration, and proactive strategy are fundamental to ensuring a more secure digital future for the country. 

Hespress. Maghrebi