Country
Ransomware attacks in Morocco
Ransomware groups have listed 34 organisations from Morocco on their leak sites since August 2022; the latest post is from 12 October 2026. Most active groups: Apt73, Tengu and Lockbit3. Most affected sector: Professional Services.
Total posts
34
First seen
2022-08-26
Latest post
2026-10-12
Groups
19
Most active groups
- Apt73 4
- Tengu 4
- Lockbit3 3
- Qilin 3
- Incransom 2
- Medusa 2
- Spacebears 2
- Stormous 2
- Thegentlemen 2
- Arcusmedia 1
Most targeted sectors
- Professional Services 6
- Government & Defense 5
- Manufacturing 5
- Technology 4
- Healthcare 3
- Retail & E-Commerce 3
- Transportation 3
- Agriculture and Food Production 1
- Education 1
- Financial Services 1