Jabaroot

Also known as: Jabaroot DZ, Jabaroot

JabaRoot is an Algerian hacker group that has targeted Moroccan government systems, successfully exfiltrating sensitive data from the Ministry of Economic Inclusion and the National Social Security Fund (CNSS). The group has claimed responsibility for the breach, which has raised concerns among cybersecurity experts regarding its scale and impact on citizens’ privacy. The motives behind the attack remain unclear, but it has been noted as one of Morocco’s most significant cyber-attacks affecting multiple victims. Resecurity has identified the group’s activities as part of a broader trend of APT targeting government entities in the region.

Introduction

JabaRoot is an Algerian hacker group that has targeted Moroccan government systems, successfully exfiltrating sensitive data from the Ministry of Economic Inclusion and the National Social Security Fund (CNSS). The group has claimed responsibility for the breach, which has raised concerns among cybersecurity experts regarding its scale and impact on citizens’ privacy. The motives behind the attack remain unclear, but it has been noted as one of Morocco’s most significant cyber-attacks affecting multiple victims. Resecurity has identified the group’s activities as part of a broader trend of APT targeting government entities in the region.

Activities and Tactics

Information pending cataloguing.

Notable Campaigns

Information pending cataloguing.

Tactics, Techniques, and Procedures (TTPs)

Information pending cataloguing.

Notable Indicators of Compromise (IOCs)

No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.

Malware and Tools

  • CyberGate
  • Cyber Eye RAT
  • Xpert

Attribution and Evidence

Information pending cataloguing.

References

References pending cataloguing.