Apparatus and method for protecting personal information leaked by phishing application

An apparatus for protecting personal information leaked by a phishing application, the apparatus comprising:

• one or more units being configured and executed by a processor, the one or more units comprising;
• an information extraction unit that extracts phishing server information, which is server information of the phishing application installed in a customer terminal, by decompiling a file related to the phishing application from which personal information was leaked;
• an information collection unit that collects customer-related information by accessing a phishing server through the phishing server information and scanning information included in a database;
• a dummy data generation unit that generates dummy data by performing falsification with random data so as to conform to a data format of the database of the phishing server based on the collected customer-related information;
• and
• a data falsification unit that neutralizes personal information leakage by transmitting the dummy data to the phishing server so that customer's personal information is replaced with the dummy data or so that the dummy data is combined with the leaked customer's personal information to falsify the leaked customer's personal information.