How reflections on glasses can leak the screen during video calls: a new cybersecurity risk vector that exploits lens reflections to recover sensitive information displayed on the user's screen during a video call.
Attack description: in an attack known as webcam peeking, the attacker, present on a video call, analyzes the micro-reflections appearing on the participant's glasses to reconstruct screen content. Despite the apparent smallness of the reflection, with image processing techniques and appropriate camera adjustments, it is possible to extract text and graphics.
Threat model: the attacker needs access to the video call and an image of the target's face with sufficient resolution. No malware is required on the victim's device; the video transmission alone is enough. This scenario is especially critical in corporate environments where sensitive data is handled in remote presentations and client meetings.
Relevant optical characteristics: lens reflectance, anti-reflective coating, curvature angle, and frame geometry influence the quality of the reflection. Lenses with greater curvature act as convex mirrors that compress and distort the image but retain readable information if resolution and processing are adequate.
Technical camera aspects: parameters such as exposure time, ISO, sensor resolution, focal length, and codec compression affect the amount of recoverable detail. Short exposure time reduces motion blur; high ISO may introduce noise but allows capturing more signal; higher resolution and lower compression preserve critical details for subsequent processing and text recognition.
Text size and legibility: large fonts and high contrast on the screen increase the likelihood that the reflection will be legible. Small or low-contrast texts degrade more easily, but super-resolution and optical character recognition techniques can reconstruct enough fragments to leak sensitive information.
Real impact and examples: research shows that even under suboptimal conditions, fragments of emails, partial passwords, or financial data displayed in presentations can be recovered. The risk is greater when the camera is close and the participant does not manage the framing or screen brightness.
Mitigation measures: practical recommendations include adjusting the screen angle and brightness, using privacy filters, reducing frontal lighting that causes reflections on glasses, opting for quality anti-reflective coated glasses, and in critical environments, avoiding glasses during presentations. From a software perspective, it is advisable to use video conferencing platforms that offer end-to-end encryption and strict participant control, as well as detection and anonymization solutions for sensitive regions in video transmission.
How Q2BSTUDIO can help: as a company specialized in software development, custom applications, and cybersecurity services, we offer comprehensive solutions to mitigate this type of risk. We develop custom software for video conferencing protection, integrate artificial intelligence capabilities for visual leak detection, and conduct security audits that include penetration testing and remote privacy analysis. We also implement AWS and Azure cloud services for secure and scalable environments, and develop business intelligence services and dashboards with Power BI to monitor and analyze incidents.
Advanced services: at Q2BSTUDIO, we combine artificial intelligence, AI for businesses, and AI agents to automate the detection of suspicious patterns in video transmissions, and we offer consulting in custom software and custom applications that prioritize data protection. Our cybersecurity and cloud services ensure compliance and operational resilience.
Conclusion and call to action: reflections on glasses represent a real and underestimated information leak vector in video calls. If you need to assess risks, design preventive measures, or develop customized solutions to protect your remote communications, contact Q2BSTUDIO for specialized consulting in cybersecurity, artificial intelligence, and custom software development.
