More often than not, if someone breaks into your box these days with large intent, the box will be used to either watch you or use you.

Spies tend to watch you.

But the criminals tend to use the box as a proxy or something to route (tunnel) their efforts through (installed program).

The second one is very problematic.