It can be tempting to think that a nonprofit is under the radar of any cybercriminals. But they’re the exact target cybercriminals look for.