Sublime Core Feed | Sublime Security

Sublime Core Feed
Login to Sublime
Sublime Core FeedThis repo contains open-source Rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing.
Sublime Security
Last updated Aug 7th, 2026
Feed Source
GitHub
Tactic or Technique is
Rule Name & Severity
Last Updated
Observed IOC: Malicious reply-to domains
Sublime Security
3mo ago
Apr 27th, 2026
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Header analysis
Sender analysis
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Header analysis
Sender analysis
Observed IOC: Malicious reply-to root domains
Sublime Security
3mo ago
Apr 27th, 2026
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Header analysis
Sender analysis
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Header analysis
Sender analysis
Observed IOC: Malicious sender domains
Sublime Security
38m ago
Aug 7th, 2026
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Sender analysis
Header analysis
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Sender analysis
Header analysis
Observed IOC: Malicious sender root domains
Sublime Security
1mo ago
Jun 12th, 2026
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Sender analysis
Header analysis
BEC/Fraud
Credential Phishing
Malware/Ransomware
Impersonation: Domain
Social engineering
Sender analysis
Header analysis
4 Rules