Nonprofits are under attack

In the last 4 years only, we were able to identify 99244 cyber attacks impacting nonprofits.
And this is just the tip of the iceberg.

My colleagues got scared when confronted with this. The colleague who opened the email containing the malware started to feel guilty. We all did our best to reassure them. But there was this feeling of vulnerability, of being exposed.

Humanitarian

I didn’t know what to do or who turn to once we knew about the attack. How long had the breach been active? We had no idea of the extend of the hack.

Water & Sanitation

It is difficult to understand why anyone would deliberately try to disrupt the work of an organisation that is relied on by people at their most vulnerable.

Healthcare

Mental Health

A cyberwar waged against nonprofits.
But why?

Because of what they do

Most nonprofits fill critical gaps in our societies. Repressive regimes often try to discredit or shut down their operations. In fact, the nonprofit community is the sector most targeted by governments after IT.

Because of what they know

Nonprofits often amass sensitive information whilst supporting at-risk communities. Criminals steal such data to sell it to the highest bidder or to blackmail the victims.

Because of what they have

Nonprofits raise over one trillion US dollars annually. Criminals steal from them and have even started to purposefully target them.

Countless cyber threat actors now targeting nonprofits...

APT29, AKA Cozy Bear or Blue Bravo, APT37/Richochet Chollima/Red Eyes/InkySquid/ScarCruft/Reaper/Group123/TEMP.Reaper/Venus 121/G0067, APT42 AKA Charming Kitten, Arid Viper (AKA Desert Falcon, Two-tailed Scorpion, or APT C-23), Bahamut APT, Chinese APT, Donot Team (AKA APT-C-35), Patchwork APT, 22C, 8Base, Abyss, Aikira, Akira, Alligator Black Hat, Alpha Locker / MyData, ALPHV/BlackCat, Anon Black Flag, Anon Sec BD, Anonymous, Anonymous BD, Anonymous Italy, Anonymous Muslims, Anonymous Sudan, Babuk, Bangladesh Civilian Force, Belarusian Cyber Partisans, BianLian, BitLocker, Black Basta, BlackSuit, Chinese-linked hackers, Cloak, Clop, Cobalt Illusion, COLDRIVER AKA Calisto, Conti, Cyb3r Drag0nz, Cyber Error System, Cyber Toufan Team, Daixin Team, Dark Storm Team, Darkrace, Department of Science and Technology (DOST); Philippine Army, DevEye, Donut Leaks, DoppelPaymer, DumpForums and Ukrainian Cyber Alliance, Earth Empusa AKA Evil Eye, Egregor, Evasive Panda (AKA BRONZE HIGHLAND and Daggerfly)