Rabat's Digital Echoes: Whistleblower Unmasks Widespread State Spyware Deployment
A former member of Morocco’s domestic intelligence service has peeled back the curtain on the clandestine operations of the North African state, providing an unprecedented look into its use of advanced hacking software. The revelation, detailed by a whistleblower identified by the pseudonym Safir, suggests that Morocco's internal security services, specifically the Direction Générale de la Surveillance du Territoire (DGST), deployed Pegasus spyware from 2017 against a range of key domestic and foreign targets, including journalists, human rights defenders, French politicians, and Spanish cabinet ministers and police officers.
This testimony forms the backbone of a multiyear investigation initiated by Moroccan journalist Hicham Mansouri, culminating in a collaborative effort involving 14 media organizations coordinated by Forbidden Stories, with crucial technical support from Amnesty International’s Security Lab. The consortium’s analysis corroborates Safir’s account with leaked material, including the Pegasus project dataset, internal training documents, and victims’ testimony. Two other former Moroccan intelligence agents further supported these facts, painting a stark picture that directly contradicts Morocco's long-standing denials of using Pegasus to target critics.
The revelations lay bare a significant strategic acquisition and deployment. According to the investigation, representatives from the Israel-based NSO Group, manufacturer of Pegasus, provided a detailed demonstration of new technologies at an expensive villa in Rabat in 2017. This location, nicknamed “the FSSYS villa” after the UAE-based surveillance intermediary al-Fahad's Moroccan branch, FSSYS Maroc, was a known venue for such presentations. Moroccan intelligence officers and technical experts present immediately recognized Pegasus's capabilities as “revolutionary,” signaling an acute awareness and desire for such potent surveillance tools.
This exposé highlights several critical insights. Firstly, it underscores the profound chasm between official state denials and the operational realities of state surveillance, illustrating how governments can acquire and deploy sophisticated cyber tools while publicly disavowing any connection. Secondly, the deployment against a broad spectrum of targets—from local dissidents to high-ranking foreign officials—signals a strategic intent far beyond conventional counter-terrorism or criminal tracking, suggesting a proactive posture in intelligence gathering and influence projection. Lastly, it raises uncomfortable questions for NSO Group, whose stated policy of selling Pegasus only to governments for tracking criminals and terrorists appears to be consistently undermined by its alleged use against individuals traditionally protected by human rights and press freedoms.
The implications are far-reaching. The documented use of Pegasus erodes public trust in state institutions and casts a chilling effect on freedom of the press and civil society activities within Morocco and potentially beyond. The targeting of foreign politicians and law enforcement officials also carries significant diplomatic ramifications, signaling a willingness to engage in aggressive cyber espionage against allies and neighbors. This case, buttressed by insider accounts and forensic evidence, signals a pervasive global trend where powerful, commercially available surveillance technology enables states to operate in a digital grey zone, often with little accountability.
The persistent challenge for transparency and accountability in the digital age is starkly illustrated here. Despite explicit denials from Morocco claiming that investigative reporters were “incapable of proving [the country had] any relationship” with NSO Group, the collective evidence, bolstered by insider testimony, dismantles this narrative. The sophisticated capabilities demonstrated and subsequently deployed, along with the deliberate opacity surrounding their acquisition and use, represent a significant challenge to democratic norms and international relations. The digital echoes of surveillance, once confined to whispers, are now amplified by the meticulous work of journalists and human rights defenders, demanding a reckoning for the unseen hand of state power.