Detection Method: Computer Vision

Computer Vision uses image recognition to analyze visual elements in messages, attachments, and web content to detect threats or impersonation attempts. It examines logos, screenshots, and HTML to find signs of phishing or fraud.
Computer Vision can detect:
  • Brand impersonation with fake logos (e.g., Microsoft, PayPal)
  • Visual elements of phishing pages, like login forms
  • CAPTCHAs used to bypass security systems
  • Malicious content disguised as legitimate visuals
For example, attackers often create fake login pages mimicking trusted brands, and Computer Vision can detect these attempts by recognizing misused logos with high confidence.
Blog Posts
Living Off the Land: Callback Phishing via Docusign comment · Blog · Sublime Security
Living Off the Land: Callback Phishing via Docusign comment · Blog · Sublime Security
QR Code Phishing: Decoding Hidden Threats · Blog · Sublime Security
QR Code Phishing: Decoding Hidden Threats · Blog · Sublime Security
Call Me Maybe? The Rise of Callback Phishing Emails · Blog · Sublime Security
Call Me Maybe? The Rise of Callback Phishing Emails · Blog · Sublime Security
Attack Types (6):
Credential Phishing
Callback Phishing
Malware/Ransomware
Spam
BEC/Fraud
Extortion
Tactics & Techniques (18):
Impersonation: Brand
Lookalike domain
Social engineering
Exploit
Out of band pivot
Free email provider
Evasion
Image as content
PDF
QR code
Free file host
Free subdomain host
Scripting
Macros
Spoofing
Open redirect
Impersonation: Employee
HTML smuggling
Rule Name & Severity
Last Updated
Author
Types, Tactics & Capabilities
Brand Impersonation: PayPal
5d ago
Oct 1st, 2026
Sublime Security
Credential Phishing
Impersonation: Brand
Lookalike domain
Social engineering
Computer Vision
Content analysis
File analysis
Header analysis
Sender analysis
Brand impersonation: QuickBooks
6d ago
Sep 30th, 2026
Sublime Security
Callback Phishing
Credential Phishing
Impersonation: Brand
Social engineering
Computer Vision
Content analysis
Header analysis
Sender analysis
Brand impersonation: Okta
7d ago
Sep 29th, 2026
Sublime Security
Credential Phishing
Impersonation: Brand
Lookalike domain
Social engineering
Computer Vision
Content analysis
Header analysis
Sender analysis
Callback phishing via Xodo Sign comment
8d ago
Sep 28th, 2026
Sublime Security
Callback Phishing
Exploit
Impersonation: Brand
Out of band pivot
Social engineering
Computer Vision
Content analysis
Header analysis
Sender analysis
URL analysis
Callback phishing via SignFree e-signature request
8d ago
Sep 28th, 2026
Sublime Security
Callback Phishing
Exploit
Impersonation: Brand
Out of band pivot
Social engineering
Computer Vision
Content analysis
Header analysis
Sender analysis
URL analysis
Callback phishing via e-signature service
8d ago
Sep 28th, 2026
Sublime Security
Callback Phishing
Free email provider
Impersonation: Brand
Social engineering
Content analysis
Computer Vision
Header analysis
Optical Character Recognition
Callback phishing via Adobe Sign comment
8d ago
Sep 28th, 2026
Sublime Security
Callback Phishing
Evasion
Impersonation: Brand
Out of band pivot
Social engineering
Content analysis
Computer Vision
Header analysis
Sender analysis
URL analysis
Attachment: Callback phishing solicitation via image file
8d ago
Sep 28th, 2026
@vector_sec
Callback Phishing
Evasion
Free email provider
Out of band pivot
Social engineering
Image as content
Content analysis
Optical Character Recognition
Sender analysis
URL analysis
Computer Vision
Callback Phishing via Signable E-Signature Request
8d ago
Sep 28th, 2026
Sublime Security
Callback Phishing
Exploit
Impersonation: Brand
Out of band pivot
Social engineering
Computer Vision
Content analysis
Header analysis
Sender analysis
URL analysis
Brand Impersonation: Google (QR Code)
8d ago
Sep 28th, 2026
Sublime Security
Credential Phishing
Impersonation: Brand
PDF
QR code
Computer Vision
Header analysis
QR code analysis
Sender analysis
Brand impersonation: Fake Fax
11d ago
Sep 25th, 2026
Sublime Security
Credential Phishing
Impersonation: Brand
Image as content
Free file host
Free subdomain host
Social engineering
Computer Vision
Content analysis
Optical Character Recognition
Sender analysis
URL analysis
Brand impersonation: Adobe (QR code)
13d ago
Sep 23rd, 2026
Sublime Security
Credential Phishing
Impersonation: Brand
PDF
QR code
Computer Vision
Header analysis
QR code analysis
Sender analysis
Link: QuickBooks image lure with suspicious link
13d ago
Sep 23rd, 2026
Sublime Security
Credential Phishing
Impersonation: Brand
Social engineering
Computer Vision
File analysis
Optical Character Recognition
URL analysis
Attachment: Microsoft impersonation via PDF with link and suspicious language
13d ago
Sep 23rd, 2026
Sublime Security
Credential Phishing
Malware/Ransomware
Image as content
Impersonation: Brand
PDF
Scripting
Social engineering
Computer Vision
File analysis
Header analysis
Natural Language Understanding
Sender analysis
Attachment: HTML smuggling - QR Code with suspicious links
13d ago
Sep 23rd, 2026
Sublime Security
Credential Phishing
QR code
Computer Vision
Header analysis
Natural Language Understanding
QR code analysis
Sender analysis
URL analysis
URL screenshot
Brand impersonation: Toronto-Dominion Bank
13d ago
Sep 23rd, 2026
Sublime Security
Credential Phishing
Impersonation: Brand
Social engineering
Computer Vision
Content analysis
Header analysis
Natural Language Understanding
Optical Character Recognition
Sender analysis
Brand impersonation: PNC
13d ago
Sep 23rd, 2026
Sublime Security
Credential Phishing
Impersonation: Brand
Lookalike domain
Social engineering
Computer Vision
Content analysis
Header analysis
Sender analysis
Brand impersonation: DocuSign with embedded QR code
13d ago
Sep 23rd, 2026
Sublime Security
Credential Phishing
Evasion
Image as content
Impersonation: Brand
QR code
Computer Vision
Content analysis
QR code analysis
Sender analysis
Attachment: Adobe image lure in body or attachment with suspicious link
13d ago
Sep 23rd, 2026
Sublime Security
Credential Phishing
Image as content
Impersonation: Brand
Content analysis
Computer Vision
Optical Character Recognition
Sender analysis
URL analysis
Attachment: DocuSign impersonation via PDF linking to new domain
13d ago
Sep 23rd, 2026
Sublime Security
Credential Phishing
Impersonation: Brand
PDF
Social engineering
Header analysis
Sender analysis
URL analysis
File analysis
Computer Vision
Whois
Page 1 of 6