A proof of concept attack uses malware to turn headphones into microphones that can eavesdrop from across a room.