Sublime thoughts

Living Off Trusted Sites: Zoom service abuse to deliver credential phishing attack

Using the X/Twitter link shortener (t.co) to hide an AITM credential phishing payload

Community Spotlight: Email Detection Rules built by the Sublime Community

AITM phishing with Russian infrastructure and detection evasion from a lapsed domain

Detecting an email-based ClickFix attack that delivers DCRat malware payload

How ASA thinks: The technical architecture of Sublime’s Autonomous Security Analyst

ScreenConnect as malware via Canva abuse and Docusign impersonation

Figma abuse from compromised vendor used in credential theft attack

Key findings from the Q1 2025 Sublime Email Threat Research Report