Sublime Core Feed | Sublime Security

Sublime Core Feed
Login to Sublime
Sublime Core FeedThis repo contains open-source Rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing.
Sublime Security
Last updated Oct 23rd, 2026
Feed Source
GitHub
Detection Method is
Rule Name & Severity
Last Updated
Attachment: DOCX with hyperlink targeting recipient address
Sublime Security
10mo ago
Dec 17th, 2025
Credential Phishing
Malware/Ransomware
Evasion
Social engineering
File analysis
Archive analysis
XML analysis
Credential Phishing
Malware/Ransomware
Evasion
Social engineering
File analysis
Archive analysis
XML analysis
Attachment: Embedded Javascript in SVG file
Sublime Security
27d ago
Sep 28th, 2026
Malware/Ransomware
Scripting
Archive analysis
File analysis
Sender analysis
XML analysis
Malware/Ransomware
Scripting
Archive analysis
File analysis
Sender analysis
XML analysis
Attachment: Fake mobileconfig security update profile
Sublime Security
30d ago
Sep 25th, 2026
Credential Phishing
Impersonation: Brand
Social engineering
Evasion
File analysis
Content analysis
XML analysis
Credential Phishing
Impersonation: Brand
Social engineering
Evasion
File analysis
Content analysis
XML analysis
Attachment: Malformed mobileconfig file
Sublime Security
26d ago
Sep 29th, 2026
Credential Phishing
Evasion
File analysis
XML analysis
Credential Phishing
Evasion
File analysis
XML analysis
Attachment: SVG files with evasion elements
Sublime Security
5mo ago
May 8th, 2026
Malware/Ransomware
Credential Phishing
QR code
Image as content
Evasion
File analysis
XML analysis
QR code analysis
Sender analysis
Malware/Ransomware
Credential Phishing
QR code
Image as content
Evasion
File analysis
XML analysis
QR code analysis
Sender analysis
Attachment: SVG file with hyperlinks and cursor styling
Sublime Security
5mo ago
May 20th, 2026
Credential Phishing
Evasion
Image as content
File analysis
XML analysis
Content analysis
Credential Phishing
Evasion
Image as content
File analysis
XML analysis
Content analysis
Attachment: Targeted DOCX with personalized recipient acknowledgement lure
Sublime Security
2mo ago
Aug 4th, 2026
Credential Phishing
Social engineering
Archive analysis
Content analysis
File analysis
XML analysis
Credential Phishing
Social engineering
Archive analysis
Content analysis
File analysis
XML analysis
Attachment: Word document with hyperlink and fraud language
Sublime Security
1mo ago
Sep 4th, 2026
Credential Phishing
BEC/Fraud
Free email provider
Social engineering
Evasion
File analysis
XML analysis
HTML analysis
URL analysis
Natural Language Understanding
Sender analysis
Credential Phishing
BEC/Fraud
Free email provider
Social engineering
Evasion
File analysis
XML analysis
HTML analysis
URL analysis
Natural Language Understanding
Sender analysis
Spoofing: Hidden Outlook headers in self-addressed forwards
Sublime Security
19d ago
Oct 6th, 2026
BEC/Fraud
Credential Phishing
Spoofing
Evasion
Impersonation: Employee
Social engineering
Header analysis
HTML analysis
XML analysis
Sender analysis
Natural Language Understanding
BEC/Fraud
Credential Phishing
Spoofing
Evasion
Impersonation: Employee
Social engineering
Header analysis
HTML analysis
XML analysis
Sender analysis
Natural Language Understanding
9 Rules