🇲🇦Morocco
Ransomware
34
Top: apt73
Defacements
4
Top notifier: Panataran
Critical incidents
5
High-severity ransomware
Severity breakdown
- Crit515%
- High26%
- Med2779%
- Low00%
Ransomware activity over time
5 incidents over the last 90d
CISA KEV — globally critical
Known-exploited vulnerabilities (not country-scoped).
- CVE-2024-27834
Apple: Apple Multiple Products Improper Authentication Vulnerability
Added 2026-11-04
- CVE-2026-119977
WordPress: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
Added 2026-11-03
- CVE-2026-118527
Ivanti: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Added 2026-10-30
- CVE-2026-111357
Ivanti: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Added 2026-10-30
- CVE-2026-97229
GitLab: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
Added 2026-10-29
Recent ransomware incidents in Morocco
| Date | Organization | Sector | Actor | Severity |
|---|---|---|---|---|
| 2026-10-12 | Eurogate Tanger (container terminal operations) | Transportation | N0n | MEDIUM |
| 2026-10-11 | CNESTEN | Government & Defense | qilin | MEDIUM |
| 2026-09-25 | pharma5.ma | Healthcare | incransom | MEDIUM |
| 2026-09-12 | lasultanahotels.com | Hospitality | krybit | MEDIUM |
| 2026-08-14 | Avanta Maroc Ex Adecco | Professional Services | thegentlemen | MEDIUM |
| 2026-07-25 | Brazer Ingenierie | Manufacturing | arcusmedia | MEDIUM |
| 2026-07-10 | Eurodefi | Financial Services | qilin | MEDIUM |
| 2026-04-27 | haca.ma | Public Sector | apt73 | MEDIUM |
| 2026-04-27 | iam.ma | Technology | apt73 | MEDIUM |
| 2026-04-27 | ires.ma | Public Sector | apt73 | MEDIUM |
Top targeted sectors
- Manufacturing6
- Business Services5
- Healthcare3
- Public Sector3
- Consumer Services3
Threat actors active here
- apt734
- tengu4
- qilin3
- lockbit33
- incransom2
Recent defacements
Sister countries — MENA
Score delta vs Morocco (100)