Ghost in the Lens: Akira’s ransomware ride through a webcam

What if your camera turned against you? In this deep dive, we tear apart a real Akira ransomware intrusion where the payload didn’t hit a laptop or a server — it came from a hacked IP webcam. That’s right: no endpoint agent, no alerts, just silent encryption over SMB from the most unexpected device in the building.

We’ll reverse-engineer the entire attack flow, explore why EDR never saw it coming, and unpack how attackers are building footholds in the grey zone of enterprise IoT.

You’ll leave this session with a new appreciation for the devices you’re not monitoring — and a toolkit for what to do about them.

If your smart devices aren’t on your threat model — they will be after this session.