Sudan — Cyber Threat Profile
The ITU's country profile records that Sudan has an officially recognised national CIRT, Sudan CERT, while cybercrime is prosecuted under a 2018 law amended in 2020 — an amendment that Global Voices notes does not change much beyond increasing the penalty period, and whose Article 24 criminalises publishing news the author knows to be fake with the aim of "decreasing the prestige of the state." In 2025 the government established a Sudanese National Cybersecurity Authority, which presents itself as "the highest national reference and the sole regulatory body responsible for all matters related to cybersecurity in the country." A major exposure is the telecommunications sector itself: the fighting has damaged network infrastructure, and both the Sudanese Armed Forces and the Rapid Support Forces have shut down the internet to block information flows in areas controlled by the opposing side, with a February 2024 collapse taking leading mobile operator Zain largely offline. Independent media are a recurring target — the news site Sudanile was knocked offline for a week by a denial-of-service attack in October 2024, one of at least four such attacks, which sought to erase 25 years of digital archives. Sudan also lends its name to offensive activity abroad: two Sudanese nationals were indicted in the United States over the Anonymous Sudan DDoS-for-hire operation, linked to more than 35,000 attacks across the globe.- National CERT/CSIRT: Sudan-CERT
- Secure Internet servers per 1M people (2024): 2.4 (source: World Bank)
Threat actors targeting Sudan
Most targeted sectors
Recent claimed incidents
Read the full analysis on IntelFusions