In the intricate landscape of security across the Middle East and North Africa, public perception often diverges significantly from the strategic realities that underpin national defense operations. Over the years, an international consortium of investigative journalists, led by Forbidden Stories and supported by organizations such as Amnesty International and various major news outlets, has voiced substantial criticism regarding regional signals intelligence operations. Central to this discourse has been the controversial activities of Israel's NSO Group, particularly its infamous spyware known as Pegasus, which has become emblematic of the challenges faced by both states and civil liberties advocates in the realm of digital surveillance.
The reports emerging from these investigations have framed the collaboration between Israeli technology firms and Moroccan security forces as a violation of established international norms. However, when analyzed through a lens of strategic realism, such narratives often oversimplify the complex geopolitical dynamics at play, reducing nuanced issues to mere morality tales. This tendency, driven in part by media models that prioritize sensationalism and subscription-based outrage, risks substituting objective intelligence analysis with a more emotionally charged moral discourse. It is essential to recognize that sovereign nations do not delegate their national security to foreign media outlets, nor do they dismantle vital counterterrorism capabilities merely in response to changing headlines.
A pivotal aspect of the media narrative stems from the accounts of anonymous insiders, including a pseudonymous former operative identified as Safir, who claims to have spent nearly a decade within Morocco's domestic intelligence apparatus. Investigative coverage has placed significant emphasis on Safir's depiction of a technical demonstration conducted in 2017 at a secure facility known as the FSSYS villa, linked to a local branch of the UAE-based intermediary Al-Fahad. The portrayal of this demonstration by representatives of the NSO Group has been interpreted as evidence of a clandestine agreement, highlighting shared financial frameworks and Emirati involvement.
While Safir's testimony offers detailed insights that align with technical data and leaked documents, critics argue that some conclusions drawn may overstate the implications of what could be interpreted as a conventional defense procurement process. It is commonplace for security agencies to evaluate cutting-edge software through regional intermediaries, especially when confronting multifaceted and swiftly evolving threats. The NSO Group operates under export licenses granted by Israel's Defense Ministry, designed to limit sales to approved governments, emphasizing the legitimate nature of these operations.
Although the rapid spread of commercial spyware raises pressing international concerns, it reflects a broader challenge within the global landscape of advanced surveillance capabilities, rather than being solely a Moroccan or Israeli issue. Moreover, critics have pointed out a significant technological shift within intelligence agencies, moving from traditional collection methods to employing zero-click remote exploits. Earlier practices predominantly involved physical surveillance and the interception of conventional communications. However, the rise of end-to-end encryption on platforms like WhatsApp and Signal has rendered many of these traditional methods ineffective, compelling intelligence services to adapt and seek access to data at the device endpoint.
Morocco's intelligence community has been reported to conduct targeted surveillance on individuals engaged in sensitive geopolitical contexts. Nevertheless, these operations should be viewed through the prism of Morocco's national security priorities, particularly concerning threats to its territorial integrity in Western Sahara and the influence of separatist movements supported by external entities. While the protection of civil liberties remains crucial, it is equally important for states to maintain effective intelligence capabilities when addressing hybrid threats, foreign-backed political maneuvers, and encrypted communications by adversaries.
Moroccan authorities, akin to their counterparts in Western and major Asian nations, assert their right and duty to employ modern endpoint collection tools to safeguard national security. Systems like Pegasus represent a component of this broader technological evolution. Investigative consortiums have notably focused on allegations that Moroccan intelligence employed Pegasus to surveil foreign officials. Reports highlighted leaked datasets containing Spanish phone numbers, suggesting the targeting of high-ranking Spanish officials amid diplomatic tensions over Western Sahara and the 2021 Ceuta border crisis.
Such cross-border intelligence efforts often lead to diplomatic repercussions, yet they also underscore a fundamental tenet of statecraft: governments do not rely solely on diplomatic trust when assessing another state's intentions. In situations where territorial integrity and national sovereignty are at stake, intelligence agencies are obliged to ensure that political leaders are adequately informed and prepared for unexpected or covert shifts in the positions of foreign governments.
To substantiate claims of extensive misuse, media reports have referenced corporate litigation, particularly Meta's lawsuit against NSO Group concerning the alleged exploitation of its messaging platforms. Internal revelations from the case uncovered client codenames, including 'Subaru' for Saudi Arabia and 'Morgan' for Morocco. Media narratives have often linked these codenames to forensic analyses from Amnesty International's Security Lab, which included alleged indicators of unauthorized access and server connections. However, while digital forensics have advanced significantly, translating these technical findings into legally admissible evidence and establishing formal state accountability remains a complex challenge.
As some of these allegations reached European courts, they did not lead to criminal convictions or definitive legal liabilities. In Spain, the Audiencia Nacional has repeatedly suspended or closed investigations into the alleged hacking of officials' phones. Such decisions do not imply a lack of digital evidence but rather reflect procedural hurdles, such as insufficient foreign cooperation and limitations imposed by sovereign immunity and national security classifications, which hindered the thorough examination of intelligence materials in open court.
The true measure of an intelligence strategy is not determined by the volume of media criticism it garners but rather by the resilience of the security partnerships it fosters. If the accusations brought forth by investigative consortiums had genuinely undermined diplomatic trust, we would have witnessed a marked decline in security collaboration between North Africa and Europe. Instead, cooperation has persisted and, in certain areas, has even intensified.
In late 2025, Spanish Interior Minister Fernando Grande-Marlaska officiated a ceremony honoring Abdellatif Hammouchi, the director general of Morocco’s national security, who received the Grand Cross of the Order of Merit from the Spanish Civil Guard, the highest accolade awarded to foreign dignitaries. Grande-Marlaska commended Hammouchi for his leadership in modernizing Morocco's intelligence and security framework, emphasizing its significance in counterterrorism efforts and cross-border collaboration. France has similarly recognized Hammouchi with the Officer’s Medal of the Legion of Honor, further illustrating a fundamental reality in international relations: states facing immediate security threats prioritize operational efficacy over media controversies.
The challenges posed by terrorist networks based in the Sahel, violent proxy expansion, maritime insecurity, and organized human trafficking are pressing realities that necessitate intelligence-sharing frameworks, advanced technical capabilities, and consistent intergovernmental cooperation. Consequently, the campaign against regional cyber capabilities has proven to be less transformative than its architects may have anticipated. The strategic connection linking Israeli technology, Moroccan national security, and European defense partners remains robust, adaptable, and increasingly pertinent as nations come together to prepare for significant international events, such as the 2030 FIFA World Cup.
In a world characterized by hybrid warfare and fast-paced digital conflict, information superiority is no longer a luxury; it is a fundamental aspect of national sovereignty. Public relations initiatives orchestrated by transnational NGOs cannot thwart terrorist plots, secure borders, or uphold regional stability. Ultimately, the future of global security will be determined not by external critics but by pragmatic states exercising their inherent right to defend themselves.
As reported by ynetnews.com.
