Press Releases

No. 1 Phishing Prevention App Everspin's 'FakeFinder' Emerges as Solution for Supply Chain Security Reinforcement in ISMS

2025.11.20

The phishing prevention solution 'FakeFinder' from AI-based cybersecurity company Everspin (CEO Young-bin Ha) has re-emerged as a solution for strengthening supply chain security following the government's announcement of the 'Pan-Government Comprehensive Information Security Measures' last month. The reason FakeFinder—used by over 60 financial institutions including KB Kookmin Bank and Kakao Bank and holding the number one market share—is drawing attention again is for the Information Security Management System (ISMS) certification. The government recently presented major directions in its Pan-Government Comprehensive Information Security Measures, including large-scale security checks for core IT systems in public, finance, telecommunications, and platform sectors, as well as strengthening the effectiveness of ISMS/ISMS-P, improving security levels for overall software/service supply chains, and fostering the information security service industry. FakeFinder, which has obtained ISMS certification, has positioned itself as a foundation for strengthening digital supply chain security for customers such as financial institutions, telecom companies, and public institutions, covering not only their own systems but also the external security solutions they implement, under this policy trend. Everspin initially obtained ISMS certification for FakeFinder through its subsidiary Secuchart, and after the merger, had the entire management system re-verified according to new standards to obtain the ISMS certification. FakeFinder applied the world's first white-list-based malicious app detection technology. Based on a proprietary system that collects and databases over 22 million apps normally released worldwide in real-time, it precisely analyzes whether apps installed on a user's smartphone are fake apps impersonating normal ones, tampered versions of normal apps, or if remote control apps are being misused, thereby pre-blocking phishing, smishing, and remote control-based financial fraud attacks. Unlike the traditional blacklist method that only looks for "apps that caused accidents," it is a proactive defense/prevention structure that finds any app that deviates even slightly from the original form of a normal app. FakeFinder is applied to over 60 customers, including KB Kookmin Bank, Kakao Bank, Korea Investment & Securities, Shinhan Investment & Securities, KB Kookmin Card, Woori Card, DB Insurance, SBI Savings Bank, and the Korea Federation of Savings Banks, maintaining its top market share in Korea. During the ISMS certification process, FakeFinder was verified across major items of the service overall, such as ▲Information security policy and organizational system ▲Risk management process ▲Access control, encryption, and log management ▲Service operation stability. As a result, FakeFinder was officially recognized as a solution equipped with a system suitable for ISMS standards in terms of service operation and information security management as well as phishing/malicious app detection performance. With Everspin's ISMS certification, financial/telecom companies/public institutions implementing FakeFinder can now strengthen their internal service security and more stably meet compliance requirements for the entire digital supply chain including external security solutions. As recent security accidents involve not just vulnerabilities of a single system but the management responsibility of linked systems, external solutions, and terminal environments, utilizing a security solution with a verified management system can be a practical means to reduce supply chain security risks. Everspin CEO Young-bin Ha stated, "I see the government's Pan-Government Comprehensive Information Security Measures as a declaration to view security now as a problem of the entire connected ecosystem and supply chain rather than an individual system problem. The ISMS certification of FakeFinder is a signal that Everspin is prepared to meet customers' strengthened standards in terms of management systems as well as phishing/malicious app detection technology."