NETSCOUT SYSTEMS, a leading provider of observability, AIOps, cybersecurity and distributed denial of service (DDoS) attack protection solutions, has released its latest global threat intelligence report revealing how DDoS hits are intensifying across North Africa. The findings highlight that telecommunications providers – both wired and wireless – were the primary targets in Morocco, Tunisia, Libya and Algeria during the first half of 2025.

Northern Africa by the numbers:
- Morocco recorded more than 75,600 DDoS incidents, ranking second in Africa for overall attack volume behind South Africa.
- Tunisia endured the continent’s longest single DDoS campaign, lasting nearly seven hours (418.68 minutes) and also saw the highest recorded bandwidth, peaking at 756.61 Gbps.
- Libya withstood the second longest single attack in Northern Africa, at 242.6 minutes, and suffered the highest attack complexity, with 23 vectors deployed in a single incident.
- Algeria, while reporting fewer malicious attempts (186), still faced powerful events, experiencing bandwidths peaking at 432.02 Gbps and throughput at 41.05 Mpps.
“Across the region, threat actors consistently targeted the telecommunications sector, unleashing high-volume, multi-vector attacks that disrupted connectivity and threatened service reliability,” said Bryan Hamman, Regional Director for Africa at NETSCOUT. “Overall though, the results show an interesting mix of results when compared to our last Threat Intelligence Report, which looked at the second half of 2024.
“The lesson is clear: organisations must prepare for the scale and sophistication of today’s threats,” Hamman concludes.


