Sublime Security

Sublime Core Feed
Sender analysis
Learn More
Login to Sublime
Attack Types
BEC/Fraud
Callback Phishing
Credential Phishing
Extortion
Malware/Ransomware
Reconnaissance
Spam
Tactics and Techniques
Encryption
Evasion
Exploit
Free email provider
Free file host
Free subdomain host
HTML smuggling
ICS Phishing
Image as content
Impersonation: Brand
Impersonation: Employee
Impersonation: VIP
IPFS
ISO
LNK
Lookalike domain
Macros
OneNote
Open redirect
Out of band pivot
PDF
Punycode
QR code
Scripting
Social engineering
Spoofing
Detection Methods
Archive analysis
Content analysis
Computer Vision
Exif analysis
File analysis
Header analysis
HTML analysis
Javascript analysis
Macro analysis
Natural Language Understanding
Optical Character Recognition
OLE analysis
PDF analysis
QR code analysis
Sender analysis
Threat intelligence
URL analysis
URL screenshot
Whois
XML analysis
YARA
Detection Method: Sender analysis
Sender analysis helps you assess whether an email is coming from a legitimate sender. By combining machine learning and rules-based logic, this method evaluates sender profiles, looking at things like authentication results, past behavior, and patterns from previous messages.
Sender analysis can help you detect:
Impersonation attempts using fake email addresses or domains
Suspicious senders with authentication issues (e.g., SPF, DKIM, DMARC failures)
Unusual behavior based on historical patterns, like frequent urgent requests
Senders linked to known phishing or malware campaigns
Changes in sender behavior that could indicate a compromised account
For example, an attacker might try to impersonate a trusted vendor or executive. The email address or domain might look real, but sender analysis can catch issues like failed authentication checks or past suspicious activity, helping you spot these threats before they do damage.
Blog Posts
Credential phishing Charles Schwab account holders with 2FA bypass · Blog · Sublime Security
Hiding a $50,000 BEC financial fraud in a fake email thread · Blog · Sublime Security
Callback phishing via invoice abuse and distribution list relays · Blog · Sublime Security
B2B freight-forwarding scams on the rise to evade financial fraud crackdowns · Blog · Sublime Security
Detecting malicious AnonymousFox email messages sent from compromised sites · Blog · Sublime Security
Talking phish over turkey · Blog · Sublime Security
Hidden credential phishing within EML attachments · Blog · Sublime Security
Living Off the Land: Credential Phishing via Docusign abuse · Blog · Sublime Security
Living Off the Land: Callback Phishing via Docusign comment · Blog · Sublime Security
Adversarial ML: Extortion via LLM Manipulation Tactics · Blog · Sublime Security
Attack Types (7):
Credential Phishing
BEC/Fraud
Malware/Ransomware
Spam
Extortion
Callback Phishing
Reconnaissance
Tactics & Techniques (26):
Impersonation: Brand
Social engineering
Impersonation: Email address
Evasion
Lookalike domain
Spoofing
Free email provider
Out of band pivot
Impersonation: Employee
Scripting
PDF
QR code
Encryption
Impersonation: VIP
Free file host
Free subdomain host
HTML smuggling
Open redirect
Image as content
Impersonation: Domain
Macros
ICS Phishing
Exploit
OneNote
IPFS
LNK
Rule Name & Severity
Last Updated
Types, Tactics & Capabilities
Brand impersonation: SoFi
13h ago
Aug 6th, 2026
Sublime Security
Credential Phishing
Impersonation: Brand
Social engineering
Content analysis
Header analysis
Sender analysis
Natural Language Understanding
URL analysis
Credential Phishing
Impersonation: Brand
Social engineering
Content analysis
Header analysis
Sender analysis
Natural Language Understanding
URL analysis
Observed IOC: Malicious sender email addresses
13h ago
Aug 6th, 2026
Sublime Security
BEC/Fraud
Credential Phishing
Malware/Ransomware
Social engineering
Sender analysis
Header analysis
BEC/Fraud
Credential Phishing
Malware/Ransomware
Social engineering
Sender analysis
Header analysis
Brand impersonation: Punchbowl
14h ago
Aug 6th, 2026
Sublime Security
Credential Phishing
Impersonation: Brand
Social engineering
Content analysis
Sender analysis
Credential Phishing
Impersonation: Brand
Social engineering
Content analysis
Sender analysis
Credential phishing content and link (untrusted sender)
22h ago
Aug 6th, 2026
Sublime Security
Credential Phishing
Social engineering
Computer Vision
Sender analysis
URL analysis
URL screenshot
Credential Phishing
Social engineering
Computer Vision
Sender analysis
URL analysis
URL screenshot
Spam: Fake photo share
22h ago
Aug 6th, 2026
Sublime Security
Spam
Evasion
Social engineering
Content analysis
Sender analysis
URL analysis
Whois
Spam
Evasion
Social engineering
Content analysis
Sender analysis
URL analysis
Whois
Brand impersonation: Meta and subsidiaries
22h ago
Aug 6th, 2026
Sublime Security
Credential Phishing
Impersonation: Brand
Lookalike domain
Social engineering
Header analysis
Sender analysis
Credential Phishing
Impersonation: Brand
Lookalike domain
Social engineering
Header analysis
Sender analysis
Extortion / sextortion in attachment from untrusted sender
22h ago
Aug 6th, 2026
Sublime Security
Extortion
Social engineering
Spoofing
Computer Vision
Content analysis
File analysis
Natural Language Understanding
Optical Character Recognition
Sender analysis
Extortion
Social engineering
Spoofing
Computer Vision
Content analysis
File analysis
Natural Language Understanding
Optical Character Recognition
Sender analysis
Brand impersonation: Cloud services with credential theft intent
23h ago
Aug 6th, 2026
Sublime Security
Credential Phishing
Social engineering
Content analysis
Natural Language Understanding
Sender analysis
URL analysis
Credential Phishing
Social engineering
Content analysis
Natural Language Understanding
Sender analysis
URL analysis
Brand impersonation: Amazon
23h ago
Aug 6th, 2026
Sublime Security
Credential Phishing
Impersonation: Brand
Social engineering
Header analysis
Sender analysis
Credential Phishing
Impersonation: Brand
Social engineering
Header analysis
Sender analysis
BEC: Tax document request
23h ago
Aug 6th, 2026
Sublime Security
BEC/Fraud
Social engineering
Spoofing
Content analysis
Header analysis
Natural Language Understanding
Sender analysis
BEC/Fraud
Social engineering
Spoofing
Content analysis
Header analysis
Natural Language Understanding
Sender analysis
Observed IOC: Mail transiting bulletproof host - SmartApe
2d ago
Aug 5th, 2026
Sublime Security
BEC/Fraud
Credential Phishing
Malware/Ransomware
Evasion
Social engineering
Header analysis
Sender analysis
BEC/Fraud
Credential Phishing
Malware/Ransomware
Evasion
Social engineering
Header analysis
Sender analysis
Observed IOC: Mail transiting OFAC-sanctioned bulletproof host Aeza Group
2d ago
Aug 5th, 2026
Sublime Security
BEC/Fraud
Credential Phishing
Malware/Ransomware
Evasion
Social engineering
Header analysis
Sender analysis
BEC/Fraud
Credential Phishing
Malware/Ransomware
Evasion
Social engineering
Header analysis
Sender analysis
Callback phishing: Zero-width character obfuscation from freemail sender
2d ago
Aug 5th, 2026
Sublime Security
Callback Phishing
Free email provider
Evasion
Social engineering
HTML analysis
Content analysis
Sender analysis
Callback Phishing
Free email provider
Evasion
Social engineering
HTML analysis
Content analysis
Sender analysis
Service abuse: Wufoo credential theft
2d ago
Aug 5th, 2026
Sublime Security
Credential Phishing
Social engineering
Content analysis
HTML analysis
Natural Language Understanding
Sender analysis
Credential Phishing
Social engineering
Content analysis
HTML analysis
Natural Language Understanding
Sender analysis
Callback phishing in body or attachment (untrusted sender)
2d ago
Aug 5th, 2026
Sublime Security
Callback Phishing
Out of band pivot
Social engineering
Content analysis
File analysis
Optical Character Recognition
Natural Language Understanding
Sender analysis
Callback Phishing
Out of band pivot
Social engineering
Content analysis
File analysis
Optical Character Recognition
Natural Language Understanding
Sender analysis
Attachment: Callback phishing solicitation via text-based file
2d ago
Aug 5th, 2026
Sublime Security
Callback Phishing
Evasion
Out of band pivot
Social engineering
Content analysis
File analysis
Header analysis
Sender analysis
Callback Phishing
Evasion
Out of band pivot
Social engineering
Content analysis
File analysis
Header analysis
Sender analysis
AnonymousFox indicators
2d ago
Aug 5th, 2026
Sublime Security
BEC/Fraud
Credential Phishing
Malware/Ransomware
Header analysis
Sender analysis
BEC/Fraud
Credential Phishing
Malware/Ransomware
Header analysis
Sender analysis
VIP Impersonation via Google Group relay with suspicious indicators
2d ago
Aug 5th, 2026
Sublime Security
BEC/Fraud
Credential Phishing
Malware/Ransomware
Evasion
Free email provider
Impersonation: Employee
Social engineering
Spoofing
Content analysis
Header analysis
Natural Language Understanding
Sender analysis
BEC/Fraud
Credential Phishing
Malware/Ransomware
Evasion
Free email provider
Impersonation: Employee
Social engineering
Spoofing
Content analysis
Header analysis
Natural Language Understanding
Sender analysis
Brand impersonation: Microsoft with embedded logo and credential theft language
3d ago
Aug 4th, 2026
Sublime Security
Credential Phishing
Impersonation: Brand
Social engineering
Computer Vision
Natural Language Understanding
Sender analysis
Credential Phishing
Impersonation: Brand
Social engineering
Computer Vision
Natural Language Understanding
Sender analysis
Link: Suspicious recipient with timeout redirect
3d ago
Aug 4th, 2026
Sublime Security
Credential Phishing
Scripting
Evasion
Social engineering
URL analysis
Javascript analysis
HTML analysis
Sender analysis
Credential Phishing
Scripting
Evasion
Social engineering
URL analysis
Javascript analysis
HTML analysis
Sender analysis
Page 1 of 25

Rule Name & Severity	Last Updated	Author	Types, Tactics & Capabilities
Brand impersonation: SoFi	13h ago Aug 6th, 2026	Sublime Security	Credential Phishing Impersonation: Brand Social engineering Content analysis Header analysis Sender analysis Natural Language Understanding URL analysis
Observed IOC: Malicious sender email addresses	13h ago Aug 6th, 2026	Sublime Security	BEC/Fraud Credential Phishing Malware/Ransomware Social engineering Sender analysis Header analysis
Brand impersonation: Punchbowl	14h ago Aug 6th, 2026	Sublime Security	Credential Phishing Impersonation: Brand Social engineering Content analysis Sender analysis
Credential phishing content and link (untrusted sender)	22h ago Aug 6th, 2026	Sublime Security	Credential Phishing Social engineering Computer Vision Sender analysis URL analysis URL screenshot
Spam: Fake photo share	22h ago Aug 6th, 2026	Sublime Security	Spam Evasion Social engineering Content analysis Sender analysis URL analysis Whois
Brand impersonation: Meta and subsidiaries	22h ago Aug 6th, 2026	Sublime Security	Credential Phishing Impersonation: Brand Lookalike domain Social engineering Header analysis Sender analysis
Extortion / sextortion in attachment from untrusted sender	22h ago Aug 6th, 2026	Sublime Security	Extortion Social engineering Spoofing Computer Vision Content analysis File analysis Natural Language Understanding Optical Character Recognition Sender analysis
Brand impersonation: Cloud services with credential theft intent	23h ago Aug 6th, 2026	Sublime Security	Credential Phishing Social engineering Content analysis Natural Language Understanding Sender analysis URL analysis
Brand impersonation: Amazon	23h ago Aug 6th, 2026	Sublime Security	Credential Phishing Impersonation: Brand Social engineering Header analysis Sender analysis
BEC: Tax document request	23h ago Aug 6th, 2026	Sublime Security	BEC/Fraud Social engineering Spoofing Content analysis Header analysis Natural Language Understanding Sender analysis
Observed IOC: Mail transiting bulletproof host - SmartApe	2d ago Aug 5th, 2026	Sublime Security	BEC/Fraud Credential Phishing Malware/Ransomware Evasion Social engineering Header analysis Sender analysis
Observed IOC: Mail transiting OFAC-sanctioned bulletproof host Aeza Group	2d ago Aug 5th, 2026	Sublime Security	BEC/Fraud Credential Phishing Malware/Ransomware Evasion Social engineering Header analysis Sender analysis
Callback phishing: Zero-width character obfuscation from freemail sender	2d ago Aug 5th, 2026	Sublime Security	Callback Phishing Free email provider Evasion Social engineering HTML analysis Content analysis Sender analysis
Service abuse: Wufoo credential theft	2d ago Aug 5th, 2026	Sublime Security	Credential Phishing Social engineering Content analysis HTML analysis Natural Language Understanding Sender analysis
Callback phishing in body or attachment (untrusted sender)	2d ago Aug 5th, 2026	Sublime Security	Callback Phishing Out of band pivot Social engineering Content analysis File analysis Optical Character Recognition Natural Language Understanding Sender analysis
Attachment: Callback phishing solicitation via text-based file	2d ago Aug 5th, 2026	Sublime Security	Callback Phishing Evasion Out of band pivot Social engineering Content analysis File analysis Header analysis Sender analysis
AnonymousFox indicators	2d ago Aug 5th, 2026	Sublime Security	BEC/Fraud Credential Phishing Malware/Ransomware Header analysis Sender analysis
VIP Impersonation via Google Group relay with suspicious indicators	2d ago Aug 5th, 2026	Sublime Security	BEC/Fraud Credential Phishing Malware/Ransomware Evasion Free email provider Impersonation: Employee Social engineering Spoofing Content analysis Header analysis Natural Language Understanding Sender analysis
Brand impersonation: Microsoft with embedded logo and credential theft language	3d ago Aug 4th, 2026	Sublime Security	Credential Phishing Impersonation: Brand Social engineering Computer Vision Natural Language Understanding Sender analysis
Link: Suspicious recipient with timeout redirect	3d ago Aug 4th, 2026	Sublime Security	Credential Phishing Scripting Evasion Social engineering URL analysis Javascript analysis HTML analysis Sender analysis