Mastering the SLAM Method to Avoid Phishing Attacks

Apr 22

The fallout from a security breach can be catastrophic for a small business. We recently saw an uptick in unauthorized emails targeting contacts with fraudulent requests for money. While these incidents are stressful, they highlight a critical truth for small business owners: your first line of defense isn't a firewall; it's your ability to spot a phish.

To keep your business and your team safe, we recommend a simple, memorable framework called the SLAM method. SLAM stands for Sender, Links, Attachments, and Message. Here is how to use it to evaluate every email that hits your inbox.

1. S (Sender)

Always scrutinize the sender's email address. Cybercriminals are masters of "spoofing" or creating addresses that look nearly identical to trusted sources. Before you hit reply, verify that the address matches the expected source exactly. If it looks off, treat it as a threat.

2. L (Links)

Be extremely cautious with embedded links. Before clicking, hover your mouse over the link to preview the actual destination URL. If the previewed address doesn't match the content of the email or leads to a suspicious-looking domain, do not click.

3. A (Attachments)

Think twice before opening any attachment, especially if it was unexpected. Malicious files are the primary way hackers infect devices with malware or ransomware. If you weren't expecting a document, call the sender to verify it before opening.

4. M (Message)

Pay close attention to the tone and content. Does the email create a sense of extreme urgency? Are there glaring spelling errors or unusual language? Be particularly wary of any request for sensitive information or financial transactions.