Calendar phishing attacks expanding across service providers · Blog · Sublime Security 2026-07-13 True True Adversarial prompt injection payload for evading AI-based detection · Blog · Sublime Security 2026-06-25 True True Surge in callback phishing attacks abusing auto notifications, verifications, alerts, receipts, and more · Blog · Sublime Security 2026-06-17 True True Kratos phishing attack hidden in business term encoding and sophisticated obfuscation · Blog · Sublime Security 2026-06-11 True True Reviews used to attack Booking.com hosts with phishing and malware · Blog · Sublime Security 2026-06-04 True True Modern QR code phishing evasion tactics you should know about · Blog · Sublime Security 2026-05-29 True True Using AI signals within malicious email for attack detection and threat hunting · Blog · Sublime Security 2026-05-18 True True FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation · Blog · Sublime Security 2026-05-14 True True Advanced fake Zoom installer used for delivering malware · Blog · Sublime Security 2026-03-18 True True [Test] Community Spotlight: Email Detection Rules built by the Sublime Community · Blog · Sublime Security 2026-03-18 True True Scammers actively targeting real estate agents with remote access attacks · Blog · Sublime Security 2026-02-24 True True Fake Google Meet invitation, fake Microsoft Store, real malware attack · Blog · Sublime Security 2026-02-24 True True $500K financial fraud built on BEC, a domain lookalike, and a fake thread · Blog · Sublime Security 2026-02-18 True True Email attacks featuring Google Cloud Application Integration abuse and captcha.html · Blog · Sublime Security 2026-01-29 True True HostPapa abuse treasure trove discovered in GoDaddy email threat hunt · Blog · Sublime Security 2026-01-15 True True Living Off the Land: Credential Phishing via Docusign abuse · Blog · Sublime Security 2026-01-09 True True Detecting malicious AnonymousFox email messages sent from compromised sites · Blog · Sublime Security 2026-01-09 True True UK Home Office visa & immigration scam targets Sponsor Management System accounts · Blog · Sublime Security 2026-01-09 True True Detecting an email-based ClickFix attack that delivers DCRat malware payload · Blog · Sublime Security 2026-01-09 True True Google Careers impersonation credential phishing scam with endless variation · Blog · Sublime Security 2026-01-09 True True Keitaro TDS abused to deliver AutoIT-based loader targeting German speakers · Blog · Sublime Security 2026-01-09 True True B2B freight-forwarding scams on the rise to evade financial fraud crackdowns · Blog · Sublime Security 2026-01-08 True True Base64-encoding an SVG attack within an iframe and hiding it all in an EML attachment · Blog · Sublime Security 2026-01-08 True True AITM phishing with Russian infrastructure and detection evasion from a lapsed domain · Blog · Sublime Security 2026-01-08 True True Credential phishing Charles Schwab account holders with 2FA bypass · Blog · Sublime Security 2026-01-08 True True 5 email security trends from 2025 · Blog · Sublime Security 2026-01-06 True True Direct Send abuse on Microsoft 365: Just another failed authentication · Blog · Sublime Security 2025-12-18 True True Combating GenAI Email Attacks with BERT LLM · Blog · Sublime Security 2025-12-18 True True ICS phishing: Stopping a surge of malicious calendar invites · Blog · Sublime Security 2025-12-18 True True You’ve been invited to join a Meta for Business scam! · Blog · Sublime Security 2025-12-17 True True Callback phishing via invoice abuse and distribution list relays · Blog · Sublime Security 2025-12-17 True True Salesforce infrastructure abuse: Stopping email scams and spam sent via SFDC · Blog · Sublime Security 2025-11-21 True True Multi-RMM attack: Splashtop Streamer and Atera payloads delivered via Discord CDN link · Blog · Sublime Security 2025-11-13 True True Facebook credential phishing with job scams impersonating well-known companies · Blog · Sublime Security 2025-11-13 True True Callback phishing with online appointment abuse and distribution lists · Blog · Sublime Security 2025-11-13 True True Fake Meta Ads Manager in App Store and TestFlight used to phish Meta ad accounts · Blog · Sublime Security 2025-11-13 True True QR Code Phishing: Decoding Hidden Threats · Blog · Sublime Security 2025-10-22 True True Call Me Maybe? The Rise of Callback Phishing Emails · Blog · Sublime Security 2025-10-22 True True Detecting QakBot: WSF attachments, OneNote files, and generic attack surface reduction · Blog · Sublime Security 2025-10-22 True True Gotta Catch 'Em All: Detecting PikaBot Delivery Techniques · Blog · Sublime Security 2025-10-22 True True Figma abuse from compromised vendor used in credential theft attack · Blog · Sublime Security 2025-10-22 True True Hidden credential phishing within EML attachments · Blog · Sublime Security 2025-10-22 True True Hiding a $50,000 BEC financial fraud in a fake email thread · Blog · Sublime Security 2025-10-22 True True Abusing Discord to deliver Agent Tesla malware · Blog · Sublime Security 2025-10-22 True True Living Off Trusted Sites: Zoom service abuse to deliver credential phishing attack · Blog · Sublime Security 2025-10-22 True True Payroll Fraud via LLM-Generated Emails · Blog · Sublime Security 2025-10-22 True True Microsoft OAuth URL used as redirect to AITM credential phishing site · Blog · Sublime Security 2025-10-22 True True Phishing for Xfinity credentials with malicious Zoom Docs · Blog · Sublime Security 2025-10-22 True True Scripting Vector Grifts: SVG phishing with smuggled JS and adversary in the middle tactics · Blog · Sublime Security 2025-10-22 True True ScreenConnect as malware via Canva abuse and Docusign impersonation · Blog · Sublime Security 2025-10-22 True True 
