How a USB-connected speaker can infect a PC without ever being touched