A friend of a relative of mine works for a big security company. He went to the top hotel in a particular SE Asian country (full of lots of high powered business types) with a new blank laptop. Plugged it in to their handily supplied ethernet socket in the hotel room and left it on for a few hours. Unplugged it, brought it home. Turned it on and ran some security checks and found it was full of government made malware.