Do Son Amnesty reveals a massive Moroccan DGST surveillance network utilizing Pegasus spyware and physical espionage to target journalists and activists.
Morocco
Unit 42 exposed Jingle Thief, a Morocco-linked group exploiting Microsoft 365 credentials via phishing. They maintain 10-month access to issue fraudulent gift cards worth hundreds of thousands of dollars.