Sublime-Message-recipients Event ID 7000021

Sublime MQL (13)

• Attachment: Adobe image lure in body or attachment with suspicious link severity medium
• Attachment: QR code with userinfo portion severity high
• Brand impersonation: Hulu severity medium
• Brand impersonation: Netflix severity low
• Job scam (unsolicited sender) severity low
• Link abuse: Self-service creation platform link with suspicious recipient behavior severity high
• Link: File sharing impersonation with suspicious language and sending patterns severity medium
• Link: Personal SharePoint with invalid recipients and credential theft language severity medium
• Reconnaissance: Short generic greeting message severity medium
• Request for Quote or Purchase (RFQ|RFP) with suspicious sender or recipient pattern severity medium
• Service abuse: GitHub notification with excessive mentions and suspicious links severity high
• Spam: Single recipient duplicated in cc severity medium
• Suspicious recipient pattern and language with low reputation link to login severity medium