Preparing for phishing attacks can keep nonprofits protected

June 6, 2013

Preparing for phishing attacks can keep nonprofits protected

Nonprofits often have a lot of information stored in their virtual infrastructure, including personal data about donors, confidential financial statements and plans for expansion. The last thing any organization needs to deal with is a phishing attack that infects all devices on the nonprofit's network with viruses that install malicious software. Needless to say, protection against these attacks should be a top-of-mind priority for IT professionals at all organizations.

Phishing attacks are becoming more prevalent
Managers at nonprofits need to ensure that everyone on the team is aware of best practices for dealing with foreign email addresses and messages that seem suspicious. Recent research from security-as-a-service provider Proofpoint revealed 58 percent of IT professionals said their organization had been the target of email spear phishing attacks within the past 12 months, while 56 percent stated their organization may have also experienced another potential targeted attack or advanced persistent threat.

With more than half of IT security professionals suspicious of attacks, nonprofits have to make sure everyone within the organization is aware of how to identify potential threats, especially when navigating their email inboxes. Sixty-five percent of respondents at organizations with more than 1,000 employees said they were more likely to be the target of a phishing attack.

"These figures underline the fact that data theft continues to be a huge problem and that the organizations that perpetrate crimes involving data are becoming more and more sophisticated," said Gary Steele, CEO at Proofpoint. "The corollary is that more sophisticated defenses are needed."

Protection from spear phishing should be a priority
Many phishing attacks aren't created to infiltrate the virtual infrastructure of one entity, they usually try to seek out as many victims as possible, but there are threats that are more targeted attack, known as spearing phishing. These attacks go after one particular user or organization by posing as email users that seem legitimate, according to Tech Republic.

Cybercriminals often seek out public social media profiles or other information platforms to learn about their target before launching a spear phishing attack. Many hackers who go after a particular nonprofit have a reason, and all members of the team need to be prepared. The website said It's important that email users remain vigilant and they all know how to detect potential attacks. Here are some tips: 

  • Don't trust embedded links: Many email users are too trusting of links that are in emails. Organizations need to teach their team that phishing attacks are often launched by clicking a link, which leads to a malicious domain. Even if the link is believed to be legitimate, users should type the link manually into the browser to avoid a potential attack.
  • Be wary of attachments: Phishing experts use attachments to lure email users into an attack. Any time an attachment is received, it's important to call the sender to tests its legitimacy. Hackers have been known to embed attachments into spoofed emails, making them seem more trustworthy.
  • Threats can be a dead giveaway: Many phishing attackers try to use scare tactics to get email users to falling into their trap. The website stated messages that warn of harsh consequences without completing an action are a common strategy computer hackers use. Managers at nonprofits should warn their team not to follow directions in such emails, even if they seem like they're from a trusted sender.

Ready to chat?
Get in touch today to request a no-obligation savings evaluation.


Working with Marshal Whittey at First Nonprofit has been a great experience. He handles our request as a priority and goes above and beyond to resolve any issues we have in a timely manner. Marshall follows through to the end and ensures our needs are met. He has been a great resource for LSC and our “go to” for any tax questions we may have. With LSC transitioning several facilities into one federal tax identification number, First Nonprofit was able to assist and provide guidance with best practices resolving claims to each entity. Additionally First Nonprofit provided knowledge (information materials) and one on one training to HRS group with best practices to handle claims state adjudicated, fraudulent claims, and appeals. And processing information in the First Nonprofit [unemployment claims] system allows for timely information can be collected.

Lutheran Services Carolinas, Salisbury, NC

My experience with FNP has been wonderful. Unemployment in general is quite confusing and FNP has simplified the process for us. Everyone we have reached out to or worked with has been very helpful and follows up to be sure we understand the information. I am so happy we made the switch to FNP!

Stone Valley Community Charter School, Huntingdon, PA

First Nonprofit smoothed the unemployment perils for our organization during Covid. Without the ability to cap our UI exposure, we would not have been able to weather the storm. The program worked perfectly and we have come out of the pandemic ready to forge on. Thanks FNP!

Jewish Silicon Valley, Los Gatos, CA

My experience with the FNP has been fantastic. The idea of setting funds aside for the unemployment tax liability is a bedrock for nonprofit organizations like mine, namely ASHBA; what is even more advantageous is having the FNP as a custodian of those funds. 100% recommended!

American Saddlebred Horse & Breeders Association, Inc., Lexington, KY

I would like to comment on my experience with FNP….to date our District has saved $1,000’s of dollars by being enrolled in the First Nonprofit program. My only regret is that we did not know about this method of paying unemployment tax years ago….as I had figured about five years

ago, had we enrolled 15-20 years ago, we could have saved our small school district upwards of $500,000 in payments to IDES. Also we would have had a pretty hefty sum of money in our Reserve Account. Thankfully I attended a workshop hosted by First Nonprofit back in 2015 which got the ball rolling!

Beardstown Community Unit School District 15, Beardstown, IL

I have worked with the First Non-Profit Team for many years, and I appreciate the quick response and care that Cecilia and the team provides anytime I have questions. While there are other providers that may provide like services, First Nonprofit will always be my first choice! I appreciate you!

Innovative Services, Inc., Green Bay, WI

First Nonprofit has been easy to work with and makes the administrative process easier and smoother. We enjoy working with you.

Visually Impaired Preschool Services, Louisville, KY

Luckily for us, our interactions regarding any issues with staffing has been very minimal! I can say that all other interactions with regards to billing, 941 reporting, etc. have been extremely pleasant, accommodating and easy to work with. Kim Ghanayem is always prompt, professional and friendly. Thank you so much!

Neurologic Music Therapy Services of Arizona, Phoenix, AZ