Full Report
Bellingcat and our partners at Kenya’s Daily Nation have identified Kenyan-labelled crates of ammunition inside an alleged RSF depot close to the recently recaptured Sudanese capital Khartoum. Although we couldn’t independently verify the contents of every crate identified, tins with ammunition matching the labels on the crates were found nearby among the captured weapons displayed […] The post Kenyan Weapons Linked to Sudan’s Civil War appeared first on bellingcat.
Analysis Summary
# Incident Report: Alleged Kenyan Ammunition in Sudan Conflict Zone
## Executive Summary
This report details the discovery of Kenyan-labelled ammunition crates within a depot controlled by the Rapid Support Forces (RSF) near Khartoum, Sudan, raising significant questions about Kenya's role in the ongoing civil war despite official diplomatic commitments to peace. While the Kenyan Ministry of Defence (MoD) denied recognition of the specific crates, the presence of the munitions suggests unauthorized diversion or supply channels, further complicated by Kenya's concurrent hosting of RSF leadership and substantial resultant diplomatic tensions with the Sudanese Armed Forces (SAF).
## Incident Details
- **Discovery Date:** Unspecified, subsequent to SAF recapturing areas around Khartoum (likely post-May 20, 2025).
- **Incident Date:** During the Sudanese Civil War, supplies were present prior to SAF retaking territory.
- **Affected Organization:** Kenya (alleged source/transit country); Sudanese Armed Forces (SAF) and Rapid Support Forces (RSF) (parties involved).
- **Sector:** Geopolitics, Military Supply, Defense Industry.
- **Geography:** Sudan (site of discovery); Kenya (alleged origin/transit hub).
## Timeline of Events
### Initial Access
- **Date/Time:** Prior to SAF recapturing Khartoum on May 20, 2025.
- **Vector:** Logistical supply chain/diversion (allegedly utilizing Kenya as a logistical hub).
- **Details:** Kenyan-labelled crates of ammunition, including types (14.5×114 mm cartridges and HE PP87 mortar bombs) not explicitly listed as produced by Kenya Ordnance Factories Corporation (KOFC), were found in an RSF-controlled depot.
### Lateral Movement
- **N/A:** This incident concerns the alleged supply chain/transfer of materiel rather than adversarial network movement.
### Data Exfiltration/Impact
- **Data Stolen or Damaged:** None explicitly mentioned, but the integrity of international arms embargoes and regional peace efforts was compromised.
- **Impact:** Fueling the Sudanese Civil War; severe diplomatic fallout between Kenya and the Sudanese government.
### Detection & Response
- **How it was discovered:** Bellingcat and Daily Nation partners investigated and filmed the ammunition crates among weapons displayed by SAF following the retaking of Khartoum.
- **Response actions taken:** Daily Nation queried the Kenyan MoD regarding the crates, provenance, and supply policy. The MoD issued a non-committal denial, stating they did not recognize the markings and focusing defenses only on nationally produced ammunition.
## Attack Methodology
- **Initial Access:** External supply/transfer facilitated by geopolitical factors (allegedly using intermediaries like the UAE functioning via Kenyan hubs).
- **Persistence:** N/A
- **Privilege Escalation:** N/A
- **Defense Evasion:** Potentially exploiting the murky nature of international arms transfers and the UN arms embargo on Darfur.
- **Credential Access:** N/A
- **Discovery:** N/A (Reconnaissance by investigative journalists).
- **Lateral Movement:** N/A
- **Collection:** N/A
- **Exfiltration:** N/A
- **Impact:** Military support provided to one faction (RSF) in violation of regional peace efforts and potential international sanctions compliance.
## Impact Assessment
- **Financial:** Potential implications for Kenya related to loan agreements (e.g., $1.5 billion UAE-backed loan following RSF conference in Nairobi).
- **Data Breach:** No direct data breach reported.
- **Operational:** Increased intensity of the Sudanese Civil War; Sudanese Government banned all imports from Kenya.
- **Reputational:** Significant reputational damage to the Kenyan government regarding its stated commitment to peace in Sudan.
## Indicators of Compromise
- **Network Indicators (Defanged):** N/A
- **File Indicators:** Images/footage circulating on social media allegedly showing Kenyan MOD-labelled ammunition crates.
- **Behavioral Indicators:** Kenyan government hosting of RSF leader General Dagalo (Hemedti) preceding the discovery; subsequent Sudanese government import ban against Kenya.
## Response Actions
- **Containment:** N/A (The material was already in the conflict zone).
- **Eradication:** N/A
- **Recovery:** N/A (Focus shifts to diplomatic stabilization).
## Lessons Learned
- Geopolitical alignments (e.g., hosting RSF leaders) and diplomatic objectives (promoting peace) can be directly undermined by perceived or actual logistical support to warring factions.
- Kenyan MoD's response was limited, failing to address potential international transfers or diversions, highlighting potential gaps in accountability for arms exports/transfers.
- The ongoing conflict involves numerous international arms suppliers outside the UN embargo framework (China, Iran, Russia, UAE).
## Recommendations
- Kenya must conduct an immediate, transparent audit of all ammunition stock and international transfers by KOFC and the MoD to definitively rule out diversion channels.
- Kenya should publicly clarify its involvement, if any, in arms transit related to the Sudan conflict, especially concerning known transit hubs identified by researchers.
- International monitoring bodies should closely examine the nexus between UAE financial support to Kenya and the alleged shipment of materials transiting via Kenya to the RSF.