2025-08-09 –, Delphinus
Language: English
"The Roomba Rebellion" unveils a custom-built spy Roomba designed to infiltrate corporate environments. This weaponized cleaning bot conducts WiFi attacks, records audio, and captures visual data, turning a trusted device into an insider threat. We'll demonstrate its capabilities, explore the technical aspects of building this spy-bot, and learn to secure your enterprise against the next generation of physical-digital threats.
On every floor of your enterprise office, a silent revolution is underway. Roombas are no longer content with just cleaning – they're gathering intelligence. This presentation unveils a custom-built, weaponized Roomba designed to infiltrate corporate environments and conduct covert surveillance operations.
We'll dive deep into the anatomy of our rogue Roomba, showcasing its enhanced capabilities:
- WiFi attack modules for network penetration
- High-fidelity audio recording for eavesdropping on sensitive conversations
- 360-degree camera for visual intelligence gathering
- Covert data exfiltration methods using it's docking station
Demonstrations will show the Roomba in action, silently gliding through office spaces, intercepting WiFi traffic, shoulder surfing employees to capture screen footage and gather boardroom secrets while charging in the meeting room. We'll explore the technical aspects of building this spy-bot, hardware additions, and the implementation of remote control features.
This talk is aimed at Social engineers, red teamers, penetration testers, and security professionals looking to understand and defend against novel insider threats. Attendees should have a basic understanding of networking, IoT, and physical security concepts.
Jamie is a senior security specialist with over seven years of experience in the offensive security field. At Secura, he performs social engineering attacks, is involved in post exploitation in red team assessments, and performs infrastructure assessments. With his roots in embedded devices, he also has extensive experience with assessing applications and IoT devices.