download.cyberlearn.academy

Classification: Malicious

download.cyberlearn.academy is a malicious hostname. Linked to Cobalt Strike, Avaddon malware. 33 sightings, last seen 2026-07-09. Seen in 4 countries.

Current activity

  • Online — resolving/reachable. Last checked 2026-10-17 00:37:30.
  • Command & Control server — Used by cybercriminals to control victim computers.
  • Malware distribution — This indicator is distributing malware.

MITRE ATT&CK associations

Malware families: COBALT STRIKE (S0154) AVADDON (S0640) ASYNCRAT (S1087) MAZE (S0449)

Where it has been seen

Observed by Maltiverse Threat Observatory sensors in BR, DO, EC and US, across education, financial services, professional services and technology networks.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Maltiverse Threat Observatory 2026-02-07 19:10:06 2026-07-09 16:05:15 anomalous-activity botnet country_code:br country_code:do industry:education-and-nonprofits industry:financial-services industry:professional-services
Maze Triage 2026-07-09 15:47:41 2026-07-09 15:47:41 malicious-activity S0449 Maze
Asyncrat Maltiverse Threat Observatory 2026-03-11 22:10:07 2026-06-11 04:15:20 anomalous-activity country_code:br country_code:ec country_code:us industry:education-and-nonprofits industry:professional-services industry:technology-and-telecommunications malware S1087 AsyncRAT
Asyncrat Triage 2026-03-11 21:32:40 2026-06-11 03:15:46 malicious-activity S1087 AsyncRAT
Avaddon Triage 2026-05-02 18:45:09 2026-05-02 18:45:09 malicious-activity S0640 Avaddon
Malicious URL Triage 2026-03-04 12:26:10 2026-03-18 00:01:55 malicious-activity
Cobalt strike Maltiverse Threat Observatory 2026-03-13 14:05:09 2026-03-13 14:15:09 anomalous-activity country_code:br country_code:ec country_code:us industry:education-and-nonprofits industry:professional-services industry:technology-and-telecommunications malware S0154 Cobalt Strike
Cobalt Strike Triage 2026-03-13 13:30:56 2026-03-13 13:30:56 malicious-activity S0154 Cobalt Strike
Metasploit Triage 2026-02-07 18:50:38 2026-02-07 18:50:38 malicious-activity

Tags

metasploit backdoor discovery trojan asyncrat venom clients rat cobaltstrike 0 execution persistence ransomware avaddon adware spyware maze credential_access defense_evasion impact stealer

IP addresses resolved by this hostname

Whois information

Domain
cyberlearn.academy
TLD
academy
First indexed
2026-02-07 18:55:12
Last updated
2026-10-17 00:37:30