CB Response Defends South Korean Special Prosecutor’s Office from Targeted Cyberattacks During Impeachment of Former President Park Geun-hye

Through a relationship with Korean security partner, Naru Security Inc., Carbon Black collaborated with the special prosecutor’s office to provide end-to-end endpoint monitoring with CB Response, defending the office from targeted cyberattacks.

Park, the first woman to be elected as president of South Korea, was impeached in December and officially stripped of power in March. She was recently indicted on bribery, extortion, abuse of power and other high-profile corruption charges. Former human rights attorney and student activist, Moon Jae-in, was elected as Park’s replacement on May 9.

“Park’s impeachment was a global affair being tracked by millions of news consumers,” said Kane Lightowler, Carbon Black’s managing director, Asia Pacific. “Given how high profile this case was, there were many risks to the special prosecutor’s office. There was concern that Park’s supporters might attempt to delete or taint evidence and the risk of other cyberattackers hoping to profit by leaking the latest evidence to the media. By leveraging CB Response, Naru Security gained valuable insight into nefarious endpoint activity and kept the prosecutor’s office safe during an unsettling time. Increasingly, governments and political organizations around the world are turning to Carbon Black to protect their most sensitive information.”

From December through February, Naru Security deployed CB Response across all of the special prosecutor’s office’s endpoints and integrated CB Response with the network solution ConnecTome to collect data and visualize it end-to-end. CB Response identified and confirmed numerous malicious activities on the office’s endpoints, stopping the potential destruction of critical trial evidence.

“In the early stages of monitoring, we identified malicious activities via ConnecTome and pinpointed the process and MD5 with CB Response,” said Joon Kim, Naru Security’s CEO. “Moreover, unknown attempted data exfiltration was identified by CB Response. Carbon Black offered valuable insight during a time of great political unrest in South Korea.”

About CB Response

CB Response is the most precise IR and threat hunting solution for SOC practitioners, allowing them to get the answers they need faster than any other tool. Only CB Response continuously records and captures all threat activity so security teams can hunt threats in real time, visualize the complete attack kill chain, and then respond and remediate attacks quickly. The result is zero-gap endpoint visibility. Investigations are accelerated because the information needed is always available with conclusive answers to investigation questions. With CB Response, alert validation and triage are streamlined because the details of what caused an alert are at responders’ fingertips.

CB Response was recently named Best Endpoint Detection and Response Solution by security professionals in the SANS Institute’s Best of 2016 Awards.

About Carbon Black

Carbon Black is a leading provider of next-generation endpoint security. With more than 9 million endpoints under management, Carbon Black has more than 3,000 customers, including 30 of the Fortune 100. These customers use Carbon Black to replace legacy antivirus, lock down critical systems, hunt threats, and protect their endpoints from the most advanced cyberattacks, including non-malware attacks.