Who are the Jabaroot? The “hackers” who are chasing Moroccan spies

In response to the humanitarian crisis that Ceuta is currently experiencing after the entry of 70,000 migrants on July 30, the hacker group Jabaroot is threatening to reveal the agents’ identities who work in the Moroccan intelligence services. Well, they are considered responsible for planning the attack against Spain.

The threat came last Tuesday night through their Telegram channel, where they claimed to have the identity of 70,000 workers of the General Directorate of Territorial Supervision (DGST), a body headed by Abdelatif Hammouchi, who is also the top police chief (DGSN). To demonstrate the veracity of their information, the group attached a small list with names, dates of birth and identity documents of a group of agents, according to what “El Confidencial” reported.

The group accuses Fouad Ali el Himma, the king’s advisor, of having planned the attack

The main reason for this threat would be due to the massive entry experienced in Ceuta a few weeks ago, an attack that, according to hackers, would have been planned by Fouad Ali el Himma, advisor to King Mohammed VI, and another politician whose name they have not yet wanted to reveal. Despite thisthe king of Morocco, they claim, was not aware of the events that were going to take place in the Spanish city.

“They are the ones who have planned the attack to put Spain in a difficult situation“, they stated in one of the messages sent by their Telegram group. Likewise, they affirm that “everything happened with the knowledge of a large country and another fictitious state“. According to the Spanish media, these mentions could refer to the United States, Rabat being one of its main military and intelligence partners, and to Israel.

According to the hacker group, Hammaouchi would be the one who would have carried out the attack against Spain and ask for his resignation. “We will reveal the true identities of the DGST agents as well as their ranks. You can verify the authenticity of this information before resigning… You better turn in your badge and walk away, you loser. Your time here is over“, they wrote in the message attached to the image with the agents’ data.

Jabaroot, a group that has already carried out several data leaks

On the other hand, this has not been the group’s only attack on the databases of Moroccan organizations, since they were already involved in the leak of 3,400 workers from the royal palacesdata from two million Social Security affiliates and documents from real estate properties of some politicians as important as Nasser Bourita, Minister of Foreign Affairs.

Some leaks that caused the dismissal of Mostafa Rabil, who headed the General Directorate of Information Systems Security. Despite this, the authorities relate. Likewise, in response to the threats, the Moroccan authorities They have linked the terrorist group to Algeriawith whom they broke diplomatic relations in August 2021, the result of a geopolitical rivalry intensified by the Western Sahara conflict.

This link is questioned by cybersecurity experts and intelligence sources, so Jabaroot’s origin is still unknown. For its part, the consulting firm Navankintellligence theorizes about the possibility that a former agent is behind these attacks, explains the Spanish media. What is known is that the group emerged in April 2025, when took responsibility for the hacking of the Moroccan National Social Security Fund (CNSS), as explained by “Moncloa.com”.