[SomeStupidPoint]

I always thought the idea of "coral malware" (made it up, cause it grows and hardens as it goes) was interesting.

Essentially a worm, but one that patches the exploit it uses to infect, and then after X shares, deletes itself except for the patch. Eventually a "reef" of hardened remains covers the platform.

Illegal, because it is still malware, but an interesting avenue that hacktivists could explore.

[BoorishBears]

It's happened before:

https://en.wikipedia.org/wiki/Welchia

https://en.wikipedia.org/wiki/Anti-worm

[franciscop]

I thought the same about IoT, but of course after some searching it's already been made. All of those "IoT compromised" things you read, the compromising party also changes the default password so they are the only ones.