Attack Type: Malware/Ransomware

Malware and Ransomware attacks are designed to infect your system through things like fake invoices, password-protected attachments, or files disguised as routine business documents. Once opened, they quietly install malicious software that can steal data, encrypt files, or open the door for more serious threats.
You might see things like macro-enabled Office documents, HTML attachments, or ZIP files that require a password. These are tricks to get around email filters and convince you to interact. Once the malware runs, it can connect to attacker-controlled servers, spread across your network, and even bring in more payloads.
Ransomware is especially damaging. It locks up your files and demands a payment—usually in cryptocurrency—to get them back. Some attackers also steal data and threaten to leak it if the ransom isn’t paid, a tactic known as double extortion. The impact can be severe, including downtime, lost data, financial loss, and reputational damage.
Rule Name & Severity
Last Updated
Author
Types, Tactics & Capabilities
Attachment: Password-protected PDF with fake document indicators
2d ago
Jan 21st, 2026
Sublime Security
/feeds/core/detection-rules/attachment-password-protected-pdf-with-fake-document-indicators-b45e4440
Link: Excessive URL rewrite encoders
2d ago
Jan 21st, 2026
Sublime Security
/feeds/core/detection-rules/link-excessive-url-rewrite-encoders-b88e53a7
Link to Google Apps Script macro via comment tagging
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/link-to-google-apps-script-macro-via-comment-tagging-66fecd30
Suspicious Links to Cloudflare R2 and Edge Services
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/suspicious-links-to-cloudflare-r2-and-edge-services-5dd3e5c8
Open redirect: tkqlhce.com
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/open-redirect-tkqlhcecom-44eef073
Brand impersonation: Sharepoint fake file share
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/brand-impersonation-sharepoint-fake-file-share-ff8b296b
Open redirect: Medium
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/open-redirect-medium-18c6aa1b
Open redirect: Nested Doubleclick.net
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/open-redirect-nested-doubleclicknet-bbed5cc6
Open redirect: obunsha.co.jp
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/open-redirect-obunshacojp-e972dacf
Open redirect: Panera Bread
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/open-redirect-panera-bread-91a726a2
Open redirect: phoenixartstudio.net
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/open-redirect-phoenixartstudionet-7b83c3ab
Open redirect: PremierBet
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/open-redirect-premierbet-0ad17224
Open redirect: qrxtech.com
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/open-redirect-qrxtechcom-b790552a
Open redirect: radiopublic.com
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/open-redirect-radiopubliccom-2cb3f7a0
Open redirect: retailrocket.net
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/open-redirect-retailrocketnet-0e00e7cb
Open redirect: ringaraja.net
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/open-redirect-ringarajanet-4d9594f4
Open redirect: sciencebuddies.org
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/open-redirect-sciencebuddiesorg-019317d4
Open redirect: secondstreetapp.com
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/open-redirect-secondstreetappcom-6767888d
Open redirect: shoppermeet.net
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/open-redirect-shoppermeetnet-fe105c91
Open redirect: Slack
11d ago
Jan 12th, 2026
Sublime Security
/feeds/core/detection-rules/open-redirect-slack-1b15f4a3