Morocco's Cybersecurity Landscape in Africa
In a striking revelation, Morocco has secured the third position among African nations for the number of cyber incidents recorded in 2025, trailing only behind Nigeria and South Africa. According to the report titled Africa’s Digital Defense Race, released by Mastercard on October 12, approximately 7,300 incidents targeting Moroccan organizations were documented throughout the year, contributing to a continent-wide total of 69,236 incidents—equating to around one incident every eight minutes. This statistic underscores Morocco's share of 10.6% of the total incidents, averaging 612 incidents per month, with a notable surge peaking at 1,882 in April of the same year.
The report categorizes Nigeria at the forefront of cyber incidents, accounting for 24.4% of the continental total, followed by South Africa with 12.6%. Morocco surpasses Egypt, which stands at 8.8%, while Kenya follows with 7.1%. Together, these four nations represent the most digitally advanced economies on the continent, collectively encompassing 54.7% of the observed cyber activity. This concentration can be attributed to several factors, including the proliferation of digital services, robust financial infrastructures, and the prevalence of online platforms—environments where substantial transaction volumes and data flows render systems more vulnerable to cyber attacks.
Growing Cyber Threats and Challenges
The report reveals an alarming trend of increasingly organized cybercriminal activities. Across Africa, various attack vectors have been identified, with malware, ransomware, email social engineering, and reconnaissance operations being the primary methods detected. These four tactics collectively account for 57.6% of the observed incidents, highlighting the evolving methodologies employed by cybercriminals. Malware can infiltrate systems to steal information or disrupt functionality, while ransomware typically locks users out of their files, often demanding a ransom for restoration. Social engineering relies on manipulating users through fraudulent emails designed to extract credentials or trick them into opening harmful attachments.
Moreover, the preparation for cyber attacks often involves identifying vulnerabilities and gathering intelligence about the target, enabling attackers to execute their plans more effectively. The report indicates a significant professionalization of cybercrime, with over 60% of incidents where culprits were identified attributed to two main categories: malicious hackers (41.5%) and organized criminal groups (20%). Political actors, referred to as cyber warriors, account for 13.9%, while state-sponsored actors represent 9.7%. Motives range from economic gain and espionage to gaining access to critical infrastructures or disrupting services.
Morocco's situation reflects a broader increase in cyber threats across Africa, with an estimated 421.4% rise in cyberattacks from 2016 to 2025, contrasting with a global increase of 307.3%. This alarming growth parallels the rapid transformation of African economies, where mobile financial services, e-commerce, online payment platforms, and administrative processes have profoundly altered interactions among individuals, businesses, and institutions. While these advancements present new economic opportunities, they also expand the exposure to cyber threats, as systems managing payments, personal data, and service continuity become targets for those seeking to exploit vulnerabilities.
The report emphasizes that the available statistics only partially capture the reality of cyber threats. Only 30% of African countries have established incident reporting systems, while 29% maintain a record of digital evidence and 19% possess a database for cyber threat intelligence. The lack of reporting mechanisms and information-sharing limits the ability to document incidents accurately and assess their true cost.
Despite having a specific institutional framework in place, Morocco faces significant challenges in enhancing its cybersecurity resilience. The report estimates that over 200,000 cybersecurity positions will remain unfilled in Africa by the end of 2025, highlighting a 23% deficit of professionals within the continental ecosystem. Additionally, 36% of African organizations consider their resilience against cyber threats inadequate. As the landscape evolves, organizations must not only implement robust technical solutions but also focus on monitoring systems, managing access, providing employee training, and responding swiftly to any detected intrusions. The need for cooperation between public authorities, regulatory bodies, technology firms, banks, and telecommunications operators is paramount, as a significant portion of Africa's digital infrastructure is developed and maintained by the private sector.
As Morocco navigates its cybersecurity challenges, it is crucial for the Kingdom to continue fostering national and regional collaboration, leveraging existing frameworks, and enhancing its capabilities to safeguard information systems and data. By doing so, Morocco can not only protect its digital assets but also bolster economic confidence necessary for the growth of digital payments, financial services, and e-commerce.
As reported by es.le360.ma.
