It could serve as a launching point for further attacks - it's already inside the network, which is sometimes relevant especially in a corporate environment. I

It could serve as a launching point for further attacks - it's already inside the network, which is sometimes relevant especially in a corporate environment. It could display ads or install ransomware "send us $10 of bitcoin to be able to watch TV again."