MALWARE-ANDROID Indonesian Gambling Related APK Download from S3

Tim Peck@timpeck

•updated Dec 8, 2025•0•47

This rule detects the download of Android Application Package (APK) files from Amazon S3 buckets, where the HTTP URI contains keywords related to gambling (slot, bet, play, jackpot). This activity is indicative of potential malware distribution, specifically targeting Android devices with gambling-themed applications, as observed in Indonesian gambling ecosystems.