Zero-Trust Edge AI Gateway · OCF standard
MOOKER EDGE sits in front of the controllers, cameras, sensors and robots on your site. It takes them off the public internet, lets only permitted commands through, and turns alerts into action.
Secured control
Live connection
Case study · Europe 2026
In autumn 2026, attackers raised fridge and freezer temperatures in supermarkets across Europe. Both waves entered through web management interfaces reachable from the public internet, some running without updates for years.
11 to 12 Oct 2026
~700 stores
First wave, mainly in France. Controllers forced into continuous defrost overnight.
1 to 2 Nov 2026
10+ countries
Second wave reached 100 to 115 sites, plus plasma storage sites in France.
5 to 6 Nov 2026
5,000+ devices
Refrigeration controllers from the named vendors still exposed to the internet across Europe.
Regulation is catching up
Worldwide
EU CRA incident reporting applies since 11 Sep 2026. Korea's N2SF pushes security policy down to field devices.
Attacks reported
France, Belgium, Netherlands, Luxembourg, Germany, Ireland, Portugal, Italy, Sweden, Finland, Estonia
Same vulnerability found
Spain, Poland
The pattern was the same everywhere: refrigeration controllers whose management pages were reachable from the internet.
Supermarkets were the target this time.
Substations, solar farms, logistics hubs, smart city poles and schools run the same kind of remotely managed controllers, in every region.
Sources: CERT-FR alert CERTFR-2026-ALE-012; Palo Alto Networks Unit 42, "Turning Up the Heat" (Nov 2026); retailer statements reported by Euronews, NBC News and The Hacker News (Nov 2026); Regulation (EU) 2024/2847; KISA N2SF guideline 1.0. Figures are as publicly reported and may be revised.
Retrofit security
Each step of this attack pattern meets a MOOKER SHIELD control at the edge.
| Attack step | MOOKER control | What it does |
|---|---|---|
| Management web page reachable from the internet | SHIELD 03 · Tunnel OCF virtualization |
The real controller is never exposed. Remote staff reach a virtual object through an encrypted, permitted path only. |
| Weak or bypassed authentication | SHIELD 01 · Access | Only registered, trusted devices and users connect. Everything else is blocked and logged. |
| Setpoint and defrost settings changed remotely | SHIELD 02 · Packet | Only permitted commands pass. Policy can bound values, so a setpoint outside the allowed range never reaches the device. |
| A compromised device calls out to an attacker's server | Allowed domains only | Registered devices can reach permitted destinations only. Backdoor and abnormal outbound traffic is blocked, logged and the device can be isolated. |
| Nobody sees the alarm overnight | Event engine AI call (roadmap) |
Blocked commands and abnormal readings raise an alert on the console. Next: an automatic call to the person on duty. |
Controller compatibility and command policies are validated per site in a pilot. MOOKER does not claim it would have stopped any specific past incident.
Platform
Most sites buy a VPN router, a security box and a remote management tool from different vendors. MOOKER brings them together on one gateway and one console.
MOOKER EDGE
Edge AI security gateway. Router, Gateway and One variants.
MOOKER SHIELD
Zero-Trust software: access, packet and tunnel layers.
EDGE-Mesh
One shared site network for robots, sensors and signage.
MOOKER DID · Console
Signage CMS and one console for status, policy and audit logs.
01 SENSE
Existing CCTV, door, temperature and environment sensors on one device. RS-232, RS-485, TCP/IP, Wi-Fi 6E.
02 DECIDE
Edge AI cross-checks video events against door and motion sensors, so only confirmed incidents escalate.
03 DISPATCH
Approved orders reach a patrol robot platform through a dedicated 1:1 tunnel. Status and video come back.
04 NOTIFY
An AI phone call briefs the person on duty and escalates to the next contact if unanswered.
FIELD
CCTV cameras
Refrigeration, HVAC and ESS controllers
Temperature and environment sensors
Doors, radar, audio, robots
EDGE · MOOKER EDGE
SHIELD: device, command, path
Event engine and alert logic
Vision analysis on site
TLS, TPM, isolation, QoS
ACTION
Console: policy, monitoring, audit logs
Patrol robots via ROS2 / MQTT
AI outbound call (roadmap)
Hardware: Intel N100 · 16 GB RAM · 512 GB SSD · 4×2.5GbE · Wi-Fi 6E · RS-232/485 · AES-256 · −20 to +60 °C.
Robots, sensors and signage usually each get their own mobile line or access network. EDGE-Mesh joins them to one shared, secured site network, so adding a device means adding a node, not a contract. Connect sites, and robots can work across a wider area.
BEFORE
A mobile line per robot
A network per service
A new install per project
WITH EDGE-MESH
Shared backhaul
Wi-Fi offload at docks
One asset and incident ledger
Site shelter
Shared Mesh
Wider robot range
Mesh IoT Zone
Gateway map, event log, equipment control and schedules in one place. Coming next: incident timeline, CCTV event pop-ups and detect-to-notify KPIs.
Console screen translated for illustration. Sample data from a smart lounge deployment.
Global partner program
We work through system integrators and distributors in each market. You install and support; we provide the software, training and pilot support, and work with you to deploy on hardware certified for your market.
After Europe, your customers are asking whether their controllers are safe. Offer a retrofit answer this quarter.
Add a Zero-Trust layer in front of PLCs, SCADA, ESS and remote-managed equipment without touching the control logic.
Expand your line with integrated IoT security, edge monitoring and signage for the sites you already serve.
GLOBAL FOOTPRINT
Deployments in Korea and Vietnam. Partner programs in India and Malaysia. Now recruiting in Europe.
Proof
| IoT control command accuracy | 1.0 Pass |
| IoT and virtual object registration | 1.0 Pass |
| Captive portal authentication | 1.0 Pass |
| Proxy cache accuracy | 1.0 Pass |
| Wi-Fi speed retention, 30 concurrent devices | 70.63% |
Report BT-B-25-0050 · 16 to 19 Sep 2025 · criteria set by requester
5 registered patents
IoT gateway, network separation, multi-network integration, virtual devices, smart shelter operation (KR).
Awards
IPITEX 2025 Outstanding Award, ICT smart bus shelter · G-FAIR KOREA 2026, Gyeonggi Provincial Assembly Chairman's Award · SIIF 2024 Gold
Registrations
KC conformity: MOOKER EDGE, MOOKER DID (Apr 2026)
Industrial Convergence Innovative Item, valid to Dec 2027
Venture Company, valid to Sep 2027
Corporate R&D lab (Apr 2025)
Factory registration (Oct 2026)
Projects
Smart bus shelters, Ulsan and Taean (KR)
Integrated monitoring and signage CMS, Taean (KR)
Creator Hub Zone IoT, Cheonan (KR)
Incident detection, Tam Ky (VN)
Smart streetlights, Hue (VN)
ESS edge AI, national R&D project (KR)
Team and research
Founder and CEO Kang Se-Beom: 16 years developing IoT and smart city systems
In-house front-end, back-end and IoT device engineering
Joint AI research with Sookmyung Women's University
Pilot
Pick one site. We validate compatibility with your controllers first, then measure.
1
Site survey
Map devices, protocols and remote access paths.
2
Compatibility test
Confirm normal control and alarms keep working with SHIELD active.
3
Run the pilot
Measure blocked attempts, detect-to-alert time and false alarm rate.
4
Report and roll out
Results become the basis for site-wide deployment.
Step 1 · Available now
Security gateway, SHIELD 3 layers, EDGE-Mesh, equipment control, CCTV isolation, console
Step 2 · Integration
AI camera and VMS events, sensor cross-checks, robot dispatch, incident timeline
Step 3 · Roadmap
AI outbound call, contact escalation, detect-to-notify KPIs
No. MOOKER EDGE is installed in front of them. Compatibility with each controller model is confirmed during the pilot.
We don't make that claim. MOOKER removes direct internet exposure and filters commands, which are the controls agencies recommend for this attack pattern. A pilot shows how it performs on your equipment.
Contact us and our support team will check the gateway remotely, find the cause and guide your on-site staff through the next steps.
No product does that alone. MOOKER supports the access control, segmentation and monitoring measures those frameworks expect.
Local certification is handled together with our partner in each market, on hardware sourced and certified for that market. MOOKER SHIELD and the console run on that hardware.
Contact our exclusive global distributor, ComNetwork. We start with a technical call and a joint pilot at one of your customer sites.
From site survey to pilot design, we work alongside your team, wherever you are.

EXCLUSIVE GLOBAL DISTRIBUTOR
ComNetwork Co., Ltd.
© 2026 ComNetwork Co., Ltd. | MOOKER Co., Ltd. | All rights reserved.