Moroccan intelligence insider reveals widespread use of Pegasus hacking software
Source Entity
Sam Jones, José Bautista and Hicham Mansouri
A former member of Morocco's domestic intelligence service has revealed that the state has extensively used NSO Group's Pegasus spyware since 2017 to target journalists, human rights activists, and high-ranking political figures in France and Spain.
State-Sponsored Surveillance: The Pegasus Revelations in Morocco
The revelation by a whistleblower from within Morocco's domestic intelligence services marks a watershed moment in the understanding of digital espionage in North Africa. By confirming the widespread deployment of the Pegasus spyware since 2017, the insider has pulled back the curtain on a sophisticated state apparatus designed to monitor not only domestic dissent but also international diplomatic rivals. This disclosure underscores a troubling trend where cutting-edge cybersecurity tools, ostensibly designed for fighting terrorism and organized crime, are repurposed for political surveillance and the suppression of civil liberties.
The Technical Potency of Pegasus
At the heart of this controversy is Pegasus, a military-grade spyware developed by the Israeli-based NSO Group. Unlike traditional malware that often requires a user to click a suspicious link, Pegasus is renowned for its 'zero-click' capabilities, allowing it to infect a device without any interaction from the target. Once installed, the software grants the operator total control over the mobile device. This includes the ability to read encrypted messages, extract emails and photographs, and—most intrusively—remotely activate the device's microphone and camera. Essentially, the target's phone is transformed into a 24-hour surveillance device, stripping away any semblance of digital privacy.
Domestic Repression and the Chilling Effect
The targeting of journalists and human rights defenders within Morocco highlights a systemic effort to stifle internal criticism. In an environment where free speech is already precarious, the knowledge that the state can access private communications in real-time creates a profound 'chilling effect.' When activists and reporters know their every word is potentially monitored, self-censorship becomes a survival mechanism. This tactical use of spyware allows the state to preemptively identify and neutralize political opposition, effectively dismantling the democratic checks and balances provided by a free press and an active civil society.
Diplomatic Fallout: Targeting France and Spain
Perhaps the most explosive aspect of the whistleblower's testimony is the confirmation that Moroccan intelligence targeted high-ranking officials in France and Spain, including cabinet ministers and police officers. This transcends domestic policing and enters the realm of international espionage and diplomatic aggression. The targeting of EU member state officials suggests a strategic attempt by Morocco to gain leverage in bilateral negotiations, likely surrounding sensitive geopolitical issues such as Western Sahara or migration pacts. Such actions risk severely damaging diplomatic trust and may lead to sanctions or a cooling of relations between Rabat and its European partners.
The Broader Context of 'Spyware-for-Hire'
This case is a prime example of the burgeoning 'spyware-for-hire' industry, where private companies sell intrusive surveillance capabilities to governments with little to no oversight. The NSO Group has frequently argued that it only sells to vetted governments for legitimate law enforcement purposes, yet the Moroccan case demonstrates the ease with which these tools are diverted toward political targets. This highlights a critical gap in international law and the urgent need for a global regulatory framework to govern the export and use of dual-use surveillance technologies to prevent them from becoming instruments of authoritarianism.
Future Trends and Systemic Implications
Looking forward, this leak is likely to trigger a wave of forensic audits across the devices of targeted individuals and a possible increase in legal challenges against NSO Group in international courts. We can expect a shift in how diplomats and activists secure their communications, moving toward more hardened, air-gapped systems as trust in commercial mobile operating systems continues to erode. Furthermore, this event may push the European Union to implement stricter oversight on the procurement of surveillance tech by its partners to ensure that democratic values are not compromised by the tools provided by third-party vendors.
Conclusion
In summary, the insider's revelations expose a calculated campaign of digital surveillance by Morocco that bridges the gap between domestic control and international espionage. The use of Pegasus since 2017 represents a sophisticated breach of privacy and a violation of human rights on a massive scale. As the digital arms race between state actors and privacy advocates continues, the Moroccan case serves as a stark reminder that in the age of zero-click spyware, no one—regardless of their political rank or profession—is truly invisible to the state.