As one practical example, a malicious program may monitor your key presses to extract your passwords (in web browsers or sudo).

Or it could be taking screenshots behind the scenes and sending that data remotely or to a local AI.

Or turning on your mic and….