Detection Method: Computer Vision

Computer Vision uses image recognition to analyze visual elements in messages, attachments, and web content to detect threats or impersonation attempts. It examines logos, screenshots, and HTML to find signs of phishing or fraud.
Computer Vision can detect:
  • Brand impersonation with fake logos (e.g., Microsoft, PayPal)
  • Visual elements of phishing pages, like login forms
  • CAPTCHAs used to bypass security systems
  • Malicious content disguised as legitimate visuals
For example, attackers often create fake login pages mimicking trusted brands, and Computer Vision can detect these attempts by recognizing misused logos with high confidence.
Rule Name & Severity
Last Updated
Author
Types, Tactics & Capabilities
Link: Multistage landing - Abused Adobe Acrobat hosted PDF
5d ago
Sep 11th, 2026
Sublime Security
Brand impersonation: Google Drive fake file share
6d ago
Sep 10th, 2026
Sublime Security
Brand impersonation: USPS
6d ago
Sep 10th, 2026
Sublime Security
Brand impersonation: TikTok
16d ago
Aug 31st, 2026
Sublime Security
Brand impersonation: Microsoft with low reputation links
20d ago
Aug 27th, 2026
Sublime Security
Brand impersonation: UPS
22d ago
Aug 25th, 2026
Sublime Security
Link: Credential phishing link with undisclosed recipients
23d ago
Aug 24th, 2026
Sublime Security
Brand impersonation: Microsoft logo image linking to free file host
26d ago
Aug 21st, 2026
Sublime Security
Brand impersonation: QuickBooks
29d ago
Aug 18th, 2026
Sublime Security
Brand impersonation: Greetings Island
29d ago
Aug 18th, 2026
Sublime Security
Brand impersonation: Sharepoint
29d ago
Aug 18th, 2026
Sublime Security
Brand Impersonation: PayPal
1mo ago
Aug 7th, 2026
Sublime Security
Credential phishing content and link (untrusted sender)
1mo ago
Aug 6th, 2026
Sublime Security
Extortion / sextortion in attachment from untrusted sender
1mo ago
Aug 6th, 2026
Sublime Security
Brand impersonation: Microsoft with embedded logo and credential theft language
1mo ago
Aug 4th, 2026
Sublime Security
Brand Impersonation: Google (QR Code)
1mo ago
Aug 4th, 2026
Sublime Security
Brand impersonation: Okta
1mo ago
Aug 4th, 2026
Sublime Security
Link: QuickBooks image lure with suspicious link
1mo ago
Jul 29th, 2026
Sublime Security
Attachment: EML with link to credential phishing page
1mo ago
Jul 27th, 2026
Sublime Security
Attachment: QR code with credential phishing indicators
1mo ago
Jul 27th, 2026
Sublime Security