Non-profit sector 'highly vulnerable' to e-mail virus attack