CSIDB logo
Threat actor

Moroccan Islamic Union-Mail

Attribution profile

Type
Activist
Location
Morocco
Known incidents
4 incidents
Sources
4 sources
First seen
2014-10-06
Last seen
2015-05-24
Updated
2026-07-31 23:00
Aliases
2 aliases

STIX characteristics

Threat actor characteristics are available to members.

Profile narrative

The threat actor refers to itself as the Moroccan Islamic Union‑mail and describes its members as young men wearing black T‑shirts with masks covering their faces. This self‑description presents the group as an Islamic extremist collective that claims responsibility for a series of similar online attacks. No further details about its size, leadership, or internal structure are provided in the source material.

The group claimed responsibility for hacking the Massachusetts Maritime Academy website, mistakenly believing it to be the U.S. Naval Academy’s site. During the intrusion they posted an image of a soldier’s grave accompanied by a message written in Arabic. The actors stated that this incident was part of a broader pattern of comparable online operations they have undertaken. No specific malware, exploit tools, or initial access vectors are mentioned in the reporting.

The actor’s only asserted affiliation is the self‑identified Moroccan Islamic Union‑mail label; the source does not link the group to any state sponsor, criminal consortium, or financial motive. No information is provided about the group’s geographic base, funding sources, or strategic objectives beyond the claimed responsibility for the described website defacements.

Incidents

Attributed incidents are available to members.

4 incidents

Sources

Sources available to members: 4 sources.

CSIDB