3C-INT logo [Cyber]Crime Characterization for Intelligence FREE PREVIEW
You are exploring the Free preview. To unlock full read-only access to all public profiles and in-app notifications, create a free research account. For analyst / premium plans capabilities (editing, advanced tabs, exports), please contact us

Threat Actor Characterization

Back
You’re viewing the read-only version. Sign in for analyst tools (editors, promote draft, file/relations management, etc.)
Moroccan Dragons

Moroccan Dragons

ID: 90b86a64af183160d620c06da3260ee307604
Hacktivist Group Hacktivism
Threat types: Hacktivism, Intrusion, DDoS, DoS, Pro-Palestine
Morocco ISR, USA
Updated: 2026-04-12
Created: 2026-02-19
Progress: 90% Completeness: 85% Freshness: 100%
Operation zone: Israel, United States
Aliases Limited alias preview
Moroccan Dragons Cyber Team MoroccanDragons — —
Actor Network Graph
Open Network Graph
Read-only preview for anonymous visitors. Sign in with a free Research account for full workspace.
MITRE ATT&CK®
confidence: medium
Actor Techniques page ATT&CK® Diagram

Moroccan Dragons is referenced in OSINT as a Morocco-linked hacktivist brand operating in Telegram-centric coalition ecosystems, commonly associated with disruption scenarios (DDoS/DoS, takedown/defacement claims) and alliance signaling with groups such as Keymous+; it has also publicly claimed development of a proprietary ransomware program ('M-DragonsWare') without disclosed technical details.


Technique Technique name Tactics Evidence
T1498 Network Denial of Service TA0040
  • 2025-12-01 — INFERENCE (confidence: medium): As a Keymous+ ecosystem affiliate described as a regional hub, Moroccan Dragons is assessed as participating in DDoS/DoS-style disruption scenarios consistent with coalition tradecraft. · ref
  • 2025-07-02 — Alliance context places Moroccan Dragons alongside DDoS-centric operations in the Keymous+ ecosystem (coalition-level). · ref
T1491.002 External Defacement TA0040
  • 2024-11-28 — INFERENCE (confidence: medium): Moroccan Dragons is listed among Morocco-linked groups in a context that includes retaliatory cyber activity; defacement/takedown behavior is plausible within this ecosystem. · ref
T1585 Establish Accounts TA0042
  • 2025-01-01 — Telegram channel analytics listings show propaganda messaging and alliance announcements; ownership must be validated before actor-typing. · ref
  • 2026-01-01 — Directory entry includes descriptive text and tags (including #SKILLNET), suggesting online persona/channel usage and affiliation signaling (low-confidence). · ref
T1486 Data Encrypted for Impact TA0040
  • 2025-04-15 — Moroccan Dragons publicly announced development of 'M-DragonsWare' via Telegram; no technical validation disclosed (treat as claim). · ref
Strategic Intelligence
Limited preview
Last updated: 2026-03-03T21:05:54+00:00

Moroccan Dragons - Hacktivism / Disruption (coalition-aligned)

Classification: Unclassified / Open Source Intelligence (OSINT) — TLP:WHITE

Full strategic intelligence is available in Analyst and Premium plans.
Executive Analyst Brief for CISO
Saved Limited preview

Executive Analyst Brief for Decision Makers — Moroccan Dragons

Classification: Unclassified / OSINT — TLP:WHITE

Upgrade to access the full executive brief.
Tip: Hover the section title to learn what’s included in Analyst / Premium plans.
Executive brief now
Saved successfully.
Hunting Playbook
Saved Limited preview

Hunting Playbook — Moroccan Dragons


Upgrade to access the full hunting playbook.
Tip: Hover the section title to learn what’s included in Analyst / Premium plans.
Hunting Playbook now
Saved successfully.
IOC Appendix
Saved Limited preview
Last updated: 2026-03-03T21:05:21+00:00

IOC Appendix — Moroccan Dragons

Classification: Unclassified / OSINT — TLP:WHITE

More IOC context for Research. Full appendix for Analyst and Premium plans.
IOC Appendix now
Saved successfully.
OSINT Library
Saved Limited preview
Last saved: 2026-03-03T21:06:30+00:00

OSINT Library — Moroccan Dragons


2025-12-xx — Orange Cyberdefense (Cyber Intelligence Bureau) — “Keymous+ Group (PDF) — includes Moroccan Dragons as a regional cover/info-exchange hub for Morocco–North Africa”

Full OSINT references available for Research / Analyst.
OSINT Library now
Saved successfully.
Social Medial & Communication
SOCMINT integrated: 0/3
Address Verification SOCMINT
t.me/Mor************* Restricted Not integrated
t.me/Mor****************** Restricted Not integrated
t.me/Mor**************** Restricted Not integrated
Notes: preview mode hides sensitive social/contact details.
Reference Images/Associated Evidence Limited
Showing 1–1 of 1 images
Logo / Avatar Free Preview
Logo / Avatar