Some system monitors include the ability to turn on the web camera on the infected device and send the recording to the threat actors.