Sublime Core Feed | Sublime Security

Sublime Core Feed
Login to Sublime
Sublime Core FeedThis repo contains open-source Rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing.
Sublime Security
Last updated Sep 9th, 2026
Feed Source
GitHub
Detection Method is
Rule Name & Severity
Last Updated
Attachment: DOCX with hyperlink targeting recipient address
Sublime Security
8mo ago
Dec 17th, 2025
Credential Phishing
Malware/Ransomware
Evasion
Social engineering
File analysis
Archive analysis
XML analysis
Credential Phishing
Malware/Ransomware
Evasion
Social engineering
File analysis
Archive analysis
XML analysis
Attachment: Embedded Javascript in SVG file
Sublime Security
8mo ago
Jan 12th, 2026
Malware/Ransomware
Scripting
Archive analysis
File analysis
Sender analysis
XML analysis
Malware/Ransomware
Scripting
Archive analysis
File analysis
Sender analysis
XML analysis
Attachment: SVG files with evasion elements
Sublime Security
4mo ago
May 8th, 2026
Malware/Ransomware
Credential Phishing
QR code
Image as content
Evasion
File analysis
XML analysis
QR code analysis
Sender analysis
Malware/Ransomware
Credential Phishing
QR code
Image as content
Evasion
File analysis
XML analysis
QR code analysis
Sender analysis
Attachment: SVG file with hyperlinks and cursor styling
Sublime Security
3mo ago
May 20th, 2026
Credential Phishing
Evasion
Image as content
File analysis
XML analysis
Content analysis
Credential Phishing
Evasion
Image as content
File analysis
XML analysis
Content analysis
Attachment: Targeted DOCX with personalized recipient acknowledgement lure
Sublime Security
1mo ago
Aug 4th, 2026
Credential Phishing
Social engineering
Archive analysis
Content analysis
File analysis
XML analysis
Credential Phishing
Social engineering
Archive analysis
Content analysis
File analysis
XML analysis
Attachment: Word document with hyperlink and fraud language
Sublime Security
6d ago
Sep 4th, 2026
Credential Phishing
BEC/Fraud
Free email provider
Social engineering
Evasion
File analysis
XML analysis
HTML analysis
URL analysis
Natural Language Understanding
Sender analysis
Credential Phishing
BEC/Fraud
Free email provider
Social engineering
Evasion
File analysis
XML analysis
HTML analysis
URL analysis
Natural Language Understanding
Sender analysis
6 Rules