Moroccos Use of Pegasus Spyware Sparks International Debate Amid Continued Security Cooperation

In July 2026, a former officer of Morocco’s domestic‑intelligence agency DGST disclosed that the state had employed the Israeli NSO Group’s Pegasus spyware against journalists, activists and foreign officials. The claim comes after a series of investigative reports that have linked Morocco to the device, which can covertly install itself on a smartphone and harvest calls, messages and camera footage.

The ex‑official, who worked in the DGST for nearly ten years, said Pegasus first entered the agency in 2017 following a demonstration by NSO representatives at a secure site in Rabat. The officer recounted that a UAE‑based intermediary, Al‑Fahad, facilitated the demo and that the shared account structures used matched leaked technical data. His testimony aligns with documents released by investigative outlets such as Forbidden Stories and Amnesty International.

Morocco has repeatedly denied any use of Pegasus. In a 2024 statement, the government asserted it had no relationship with the Israeli company and that the allegations were unfounded. Yet the former officer’s account, combined with evidence from Meta’s 2021 lawsuit in the United States, suggests the state has indeed deployed the spyware.

Meta’s lawsuit uncovered internal client codenames employed by NSO. Court filings list “Morgan” as the codename for Morocco and “Subaru” for Saudi Arabia. The documents also reveal that Pegasus was used to target a former Moroccan journalist and a former intelligence officer.

The allegations have focused on surveillance of Spanish officials. Leaked datasets reportedly contained the phone numbers of senior Spanish leaders, including Prime Minister Pedro Sánchez, Defence Minister Margarita Robles and Interior Minister Fernando Grande‑Marlaska. The Guardian and OCCRP have reported that Moroccan security services may have used Pegasus to monitor Spanish agents who trained Moroccan counterparts in 2021.

Despite extensive media coverage, Spanish courts have not found sufficient evidence to prosecute the alleged hacking. In 2025, the Audiencia Nacional repeatedly suspended or closed investigations into the alleged phone‑hacking of senior government officials. Court decisions cited procedural obstacles, such as a lack of foreign cooperation and sovereign‑immunity restrictions that prevented intelligence material from being fully examined.

Diplomatic fallout has been limited. In late 2025, Spanish Interior Minister Fernando Grande‑Marlaska presented Morocco’s national‑security chief, Abdellatif Hammouchi, with the Grand Cross of the Order of Merit of the Spanish Civil Guard. The award recognized Hammouchi’s leadership in modernising Morocco’s intelligence infrastructure and strengthening cross‑border cooperation.

Hammouchi has also been honoured by France, receiving the Officer’s Medal of the Legion of Honour in 2025. He has previously been decorated by the French National Police and Interpol for his contributions to international security.

The continued cooperation between Morocco, Spain and France reflects shared security priorities in the region. The Sahel has seen a rise in terrorist activity, maritime insecurity and organised human trafficking, challenges that require robust intelligence‑sharing arrangements and advanced surveillance capabilities.

The shift to zero‑click, endpoint‑based spyware is driven by the widespread adoption of end‑to‑end encryption on messaging platforms such as WhatsApp and Signal. Traditional wiretapping and physical surveillance have become less effective, prompting states to seek direct access to device data. From a security perspective, the use of Pegasus is a response to the evolution of digital communications rather than a moral choice.

The allegations have not undermined Morocco’s security partnerships. The country remains a key partner for European states in counter‑terrorism and transnational crime. The upcoming 2030 FIFA World Cup in Qatar will further test the resilience of regional security cooperation.

In an era of hybrid warfare and accelerated digital conflict, information superiority is central to national sovereignty. While external critics continue to highlight the potential misuse of spyware, the practical reality is that states exercise their right to defend themselves with the tools available to them.

The current situation is that Morocco’s intelligence services continue to operate with advanced surveillance technology, including Pegasus, while maintaining diplomatic ties with European partners. No new legal actions have been taken against the Moroccan government, and the strategic partnership with Spain and France has deepened, as evidenced by recent honours and joint security initiatives.