Sublime Core Feed

This repo contains open-source Rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing.

Sublime Security

Last updated Oct 13th, 2026

Feed Source

GitHub

Rule Name & Severity	Author	Last Updated	Labels
Attachment: PDF With SAI Global ISO9001 Logo	Sublime Security	6mo ago Apr 15th, 2026	Credential Phishing Impersonation: Brand PDF File analysis YARA
Brand impersonation: AARP	Sublime Security	1mo ago Sep 4th, 2026	BEC/Fraud Credential Phishing Impersonation: Brand Social engineering Content analysis Header analysis Sender analysis
Brand impersonation: Aconex	Sublime Security	6d ago Oct 7th, 2026	Credential Phishing Impersonation: Brand Social engineering Spoofing Natural Language Understanding Content analysis Header analysis Sender analysis
Brand impersonation: Adobe Acrobat Sign PDF phishing file format template	Sublime Security	4mo ago Jun 1st, 2026	Credential Phishing Impersonation: Brand PDF Computer Vision Optical Character Recognition File analysis
Brand impersonation: Adobe (QR code)	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand PDF QR code Computer Vision Header analysis QR code analysis Sender analysis
Brand impersonation: Adobe Sign with suspicious indicators	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Social engineering Content analysis Header analysis HTML analysis Sender analysis
Brand impersonation: Adobe with suspicious language and link	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Social engineering Computer Vision Content analysis Header analysis Sender analysis
Brand impersonation: ADP	Sublime Security	9mo ago Jan 12th, 2026	Credential Phishing Impersonation: Brand Social engineering Header analysis Sender analysis
Brand impersonation: AliExpress	Sublime Security	1y ago Aug 5th, 2025	Callback Phishing Credential Phishing Impersonation: Brand Social engineering Content analysis Header analysis URL analysis
Brand impersonation: Amazon	Sublime Security	5d ago Oct 8th, 2026	Credential Phishing Impersonation: Brand Social engineering Header analysis Sender analysis
Brand impersonation: Amazon Web Services (AWS)	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Social engineering Content analysis Header analysis Optical Character Recognition Sender analysis Natural Language Understanding
Brand impersonation: Amazon with suspicious attachment	Sublime Security	6mo ago Apr 14th, 2026	Credential Phishing Impersonation: Brand Social engineering Computer Vision File analysis Header analysis Natural Language Understanding Optical Character Recognition Sender analysis
Brand impersonation: American Express (AMEX)	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Lookalike domain Social engineering Header analysis Sender analysis
Brand impersonation: Anthropic/Claude with newly registered domain	Sublime Security	2mo ago Jul 24th, 2026	BEC/Fraud Spam Lookalike domain Social engineering Spoofing Content analysis Header analysis Sender analysis Whois
Brand impersonation: Apple	Sublime Security	3y ago Aug 21st, 2023	Credential Phishing Impersonation: Brand Social engineering Header analysis Sender analysis
Brand impersonation: Aquent	Sublime Security	1y ago Oct 9th, 2025	BEC/Fraud Credential Phishing Impersonation: Brand Social engineering Content analysis Header analysis Sender analysis
Brand impersonation: Aramco	Sublime Security	1mo ago Aug 20th, 2026	BEC/Fraud Impersonation: Brand Lookalike domain Social engineering Content analysis Header analysis HTML analysis Natural Language Understanding Sender analysis
Brand impersonation: AuthentiSign	Sublime Security	8mo ago Jan 21st, 2026	Credential Phishing BEC/Fraud Impersonation: Brand Lookalike domain Social engineering Content analysis Header analysis Sender analysis
Brand impersonation: Automobile assistance associations	Sublime Security	1mo ago Aug 25th, 2026	Credential Phishing Impersonation: Brand Social engineering Content analysis Natural Language Understanding Header analysis Sender analysis
Brand impersonation: Bank of America	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Lookalike domain Social engineering Header analysis Sender analysis
Brand impersonation: Barracuda Networks	Sublime Security	9mo ago Jan 12th, 2026	Credential Phishing Impersonation: Brand Lookalike domain Social engineering Header analysis Sender analysis
Brand impersonation: Bids & Tenders	Sublime Security	2mo ago Jul 21st, 2026	Credential Phishing Impersonation: Brand Spoofing Social engineering Sender analysis URL analysis Content analysis
Brand impersonation: Binance	Sublime Security	1y ago Sep 3rd, 2025	Credential Phishing Impersonation: Brand Lookalike domain Social engineering Content analysis Header analysis HTML analysis Natural Language Understanding Sender analysis
Brand impersonation: Blockchain.com	Sublime Security	4mo ago Jun 5th, 2026	Credential Phishing Impersonation: Brand Lookalike domain Social engineering Header analysis Sender analysis
Brand impersonation: Booking.com	Sublime Security	5mo ago May 6th, 2026	Credential Phishing Impersonation: Brand Social engineering Natural Language Understanding Header analysis Sender analysis
Brand impersonation: Box file sharing service	Sublime Security	4mo ago Jun 5th, 2026	Credential Phishing Impersonation: Brand Social engineering Computer Vision Content analysis Header analysis Sender analysis
Brand impersonation: Canada Revenue Agency	Sublime Security	2mo ago Aug 1st, 2026	BEC/Fraud Credential Phishing Impersonation: Brand Social engineering Content analysis Header analysis Sender analysis
Brand impersonation: Capital One	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Lookalike domain Social engineering Computer Vision Sender analysis Header analysis
Brand impersonation: Charles Schwab	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Lookalike domain Social engineering Header analysis Sender analysis
Brand impersonation: Chase Bank	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Lookalike domain Social engineering Header analysis Sender analysis
Brand impersonation: Chase bank with credential phishing indicators	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Social engineering Computer Vision File analysis Natural Language Understanding Sender analysis URL analysis
Brand impersonation: Cloud services with credential theft intent	Sublime Security	1mo ago Sep 3rd, 2026	Credential Phishing Social engineering Content analysis Natural Language Understanding Sender analysis URL analysis
Brand impersonation: Coinbase	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Lookalike domain Social engineering Header analysis Sender analysis
Brand impersonation: Coinbase with suspicious links	Sublime Security	1y ago Sep 22nd, 2025	Credential Phishing Evasion Free subdomain host Image as content Impersonation: Brand Computer Vision Content analysis File analysis URL analysis
Brand impersonation: ConstructConnect	Sublime Security	7d ago Oct 6th, 2026	Credential Phishing Impersonation: Brand Spoofing Social engineering Sender analysis URL analysis
Brand impersonation: Dashlane	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Social engineering Header analysis Sender analysis
Brand impersonation: Deloitte LLC domain in CC	Sublime Security	1mo ago Sep 2nd, 2026	BEC/Fraud Impersonation: Brand Social engineering Header analysis
Brand impersonation: DHL	Sublime Security	12d ago Oct 1st, 2026	Credential Phishing Impersonation: Brand Lookalike domain Social engineering Header analysis Sender analysis
Brand impersonation: DigitalOcean	Sublime Security	1y ago Sep 18th, 2025	Credential Phishing Impersonation: Brand Lookalike domain Social engineering Header analysis Sender analysis
Brand impersonation: Discord notification	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Social engineering Computer Vision Content analysis
Brand Impersonation: Disney	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Social engineering Computer Vision Natural Language Understanding Content analysis Header analysis Sender analysis
Brand impersonation: DocSend	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Lookalike domain Social engineering Header analysis Sender analysis
Brand impersonation: DocuSign	Sublime Security	4mo ago Jun 1st, 2026	Credential Phishing Impersonation: Brand Lookalike domain Social engineering Spoofing Header analysis Sender analysis URL analysis
Brand impersonation: DocuSign branded attachment lure with no DocuSign links	Sublime Security	11mo ago Oct 22nd, 2025	Credential Phishing Impersonation: Brand Social engineering Computer Vision Content analysis Header analysis Natural Language Understanding Optical Character Recognition Sender analysis URL screenshot
Brand impersonation: DocuSign PDF attachment with suspicious link	Sublime Security	11mo ago Oct 22nd, 2025	Credential Phishing Impersonation: Brand PDF Social engineering File analysis Natural Language Understanding Optical Character Recognition URL analysis
Brand impersonation: DocuSign (QR code)	Sublime Security	12mo ago Oct 15th, 2025	Credential Phishing Impersonation: Brand PDF QR code Social engineering Computer Vision Header analysis QR code analysis Sender analysis
Brand impersonation: DocuSign with embedded QR code	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Evasion Image as content Impersonation: Brand QR code Computer Vision Content analysis QR code analysis Sender analysis
Brand impersonation: DoorDash	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Social engineering Header analysis Sender analysis
Brand impersonation: Dotloop	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Social engineering Header analysis Sender analysis
Brand impersonation: Dropbox	Sublime Security	20d ago Sep 23rd, 2026	Credential Phishing Impersonation: Brand Social engineering Content analysis File analysis Header analysis Sender analysis

179 Rules

Page 1 of 4