Preparing for phishing attacks can keep nonprofits protected

June 6, 2013

Preparing for phishing attacks can keep nonprofits protected

Nonprofits often have a lot of information stored in their virtual infrastructure, including personal data about donors, confidential financial statements and plans for expansion. The last thing any organization needs to deal with is a phishing attack that infects all devices on the nonprofit's network with viruses that install malicious software. Needless to say, protection against these attacks should be a top-of-mind priority for IT professionals at all organizations.

Phishing attacks are becoming more prevalent
Managers at nonprofits need to ensure that everyone on the team is aware of best practices for dealing with foreign email addresses and messages that seem suspicious. Recent research from security-as-a-service provider Proofpoint revealed 58 percent of IT professionals said their organization had been the target of email spear phishing attacks within the past 12 months, while 56 percent stated their organization may have also experienced another potential targeted attack or advanced persistent threat.

With more than half of IT security professionals suspicious of attacks, nonprofits have to make sure everyone within the organization is aware of how to identify potential threats, especially when navigating their email inboxes. Sixty-five percent of respondents at organizations with more than 1,000 employees said they were more likely to be the target of a phishing attack.

"These figures underline the fact that data theft continues to be a huge problem and that the organizations that perpetrate crimes involving data are becoming more and more sophisticated," said Gary Steele, CEO at Proofpoint. "The corollary is that more sophisticated defenses are needed."

Protection from spear phishing should be a priority
Many phishing attacks aren't created to infiltrate the virtual infrastructure of one entity, they usually try to seek out as many victims as possible, but there are threats that are more targeted attack, known as spearing phishing. These attacks go after one particular user or organization by posing as email users that seem legitimate, according to Tech Republic.

Cybercriminals often seek out public social media profiles or other information platforms to learn about their target before launching a spear phishing attack. Many hackers who go after a particular nonprofit have a reason, and all members of the team need to be prepared. The website said It's important that email users remain vigilant and they all know how to detect potential attacks. Here are some tips: 

  • Don't trust embedded links: Many email users are too trusting of links that are in emails. Organizations need to teach their team that phishing attacks are often launched by clicking a link, which leads to a malicious domain. Even if the link is believed to be legitimate, users should type the link manually into the browser to avoid a potential attack.
  • Be wary of attachments: Phishing experts use attachments to lure email users into an attack. Any time an attachment is received, it's important to call the sender to tests its legitimacy. Hackers have been known to embed attachments into spoofed emails, making them seem more trustworthy.
  • Threats can be a dead giveaway: Many phishing attackers try to use scare tactics to get email users to falling into their trap. The website stated messages that warn of harsh consequences without completing an action are a common strategy computer hackers use. Managers at nonprofits should warn their team not to follow directions in such emails, even if they seem like they're from a trusted sender.

Ready to chat?
Get in touch today to request a no-obligation savings evaluation.


Throughout our membership in the Unemployment Savings Program, First Nonprofit understood our demands, community dynamics, and the importance of seamless services; that allowed us to serve our constituents better.

Prevent Blindness America, Chicago, IL

Because INCS advocates for the operating conditions that allow charter public schools to provide high quality public education, partnering with First Nonprofit was an easy decision. First Nonprofit’s unemployment programs provide our member schools two operating elements crucial to their ability to provide high quality public education: savings and budget certainty. Capable, committed teachers are the key to student success. By participating in the unemployment insurance savings plan, charter public schools gain peace of mind and are able to invest more money in their teachers.

Illinois Network of Charter Schools, Chicago, IL

It has been our sincere pleasure to maintain a strong, vibrant business partnership with First Nonprofit. We greatly admire their strong industry knowledge, technical expertise, constant professionalism, knowledgeable and dedicated staff. They are always extremely responsive, personable and provide us with the necessary guidance and recommendations on a numerous variety of employment scenarios.

Thresholds, Chicago, IL

NYCON members who use First Nonprofit’s programs enjoy enduring savings and improved efficiency. Our association knows that success, because from the beginning, we achieved the same great benefits. Great savings, seamless technology, and responsive service. NYCON highly recommends First Nonprofit’s remarkable unemployment solutions.

New York Council of Nonprofits, Albany, NY

Visually Impaired Preschool Services has been a client of First Non-Profit since it was first offered as a benefit of VisionServe Alliance. We completed a thorough evaluation of cash savings to our agency before taking advantage of this wonderful benefit and it has been a very wise decision. Our experience with the processes from accounting to claims have been professional, expeditious and easy.

Visually Impaired Preschool Services, Louisville, KY

Luckily for us, our interactions regarding any issues with staffing has been very minimal! I can say that all other interactions with regards to billing, 941 reporting, etc. have been extremely pleasant, accommodating and easy to work with. Kim Ghanayem is always prompt, professional and friendly. Thank you so much!

Neurologic Music Therapy Services of Arizona, Phoenix, AZ

First Nonprofit has been easy to work with and makes the administrative process easier and smoother. We enjoy working with you.

Visually Impaired Preschool Services, Louisville, KY

The Ensight Skills Center has enjoyed working with First Nonprofit for several years. We are enrolled in their Unemployment Savings Program and although we have not required a lot of intervention, there have been a few times. I know others have dealt with the same problem of unemployment fraud over the last year and in our case, a call to First Nonprofit (they actually answer their phones) cleared up the issue. They also sent us a letter to send to all our employees telling them what they needed to do to prevent this in the future and protect themselves. What a relief! Over the years if I have questions or concerns, they are happy to listen, advise and help if they can. Another BIG advantage of using First Nonprofit is that all the money that is paid into the Unemployment Savings Program lives on my balance sheet as an asset. The money continues to be Ensight’s not the governments. First Nonprofit has certainly given me peace of mind.

Ensight Skills Center, Inc, Fort Collins, CO