Sublime Core Feed | Sublime Security

Sublime Core Feed
Login to Sublime
Sublime Core FeedThis repo contains open-source Rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing.
Sublime Security
Last updated Jul 15th, 2026
Feed Source
GitHub
Detection Method is
Rule Name & Severity
Last Updated
Attachment: DOCX with hyperlink targeting recipient address
Sublime Security
7mo ago
Dec 17th, 2025
Credential Phishing
Malware/Ransomware
Evasion
Social engineering
File analysis
Archive analysis
XML analysis
Credential Phishing
Malware/Ransomware
Evasion
Social engineering
File analysis
Archive analysis
XML analysis
Attachment: Embedded Javascript in SVG file
Sublime Security
6mo ago
Jan 12th, 2026
Malware/Ransomware
Scripting
Archive analysis
File analysis
Sender analysis
XML analysis
Malware/Ransomware
Scripting
Archive analysis
File analysis
Sender analysis
XML analysis
Attachment: SVG files with evasion elements
Sublime Security
2mo ago
May 8th, 2026
Malware/Ransomware
Credential Phishing
QR code
Image as content
Evasion
File analysis
XML analysis
QR code analysis
Sender analysis
Malware/Ransomware
Credential Phishing
QR code
Image as content
Evasion
File analysis
XML analysis
QR code analysis
Sender analysis
Attachment: SVG file with hyperlinks and cursor styling
Sublime Security
1mo ago
May 20th, 2026
Credential Phishing
Evasion
Image as content
File analysis
XML analysis
Content analysis
Credential Phishing
Evasion
Image as content
File analysis
XML analysis
Content analysis
4 Rules