A spear-phishing email was detected targeting NGO employees, containing a malicious link designed to harvest credentials. The email originated from an external IP address associated with known phishing activities.