Sublime Core Feed

This repo contains open-source Rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing.

Sublime Security
Last updated Apr 21st, 2026
Feed Source
GitHub
Tactic or Technique is
Rule Name & Severity
Author
Last Updated
Labels
Attachment: EML file with IPFS links
Sublime Security
5mo ago
Nov 4th, 2025
Credential Phishing
Evasion
Free file host
Free subdomain host
IPFS
File analysis
URL analysis
Credential phishing: Engaging language with IPFS link
Sublime Security
2y ago
May 3rd, 2024
Credential Phishing
Free file host
Free subdomain host
IPFS
Content analysis
Natural Language Understanding
URL analysis
Link: IPFS
Sublime Security
3mo ago
Jan 12th, 2026
Credential Phishing
Malware/Ransomware
Free file host
Free subdomain host
IPFS
Sender analysis
URL analysis
Vendor compromise: GovDelivery message with suspicious link
Sublime Security
8mo ago
Aug 5th, 2025
Credential Phishing
Malware/Ransomware
Free subdomain host
IPFS
Social engineering
Evasion
Impersonation: Brand
Natural Language Understanding
URL analysis
Whois
4 Rules