Well, if it can update its code over the internet, it can do pretty much anything. Typical uses: spam, DDoSes, anonymising traffic for illegal activities, etc.
"Just" send out spam?
Yeah, "just" send out "500.000" spams a day. Like we hadn't enough already. The vikings will win, if the pace of the war remains the same.