You bake the malware right into the hardware, then release the hardware into the wild. With keystroke loggers, spamware and trojans built right into the chip itself, you're home-free against software-based detection.