https://nj.gov/oag/newsreleases13/E-Sports_Complaint_Consent...
Relevant quotes:
> Among the many monitoring activities conducted by ESEA, the ESEA Software was programmed to automatically capture screen shots of computers, track computer mouse movements, and monitor end-users' computer activities even when they were not logged onto ESEA servers.
> ESEA did not place any restrictions on Hunczak and Thunberg's ability to access end-users' computers.
> ESEA did not put policies and procedures in place to ensure its employees were not abusing their full administrative access privileges or inappropriately accessing end-users' computer files.
> From at least April 12,2013 through April 30, 2013, the ESEA Botnet used the GPU of end-users' computers to mine for bitcoins without notice to and authorization from, or in excess of authorization from, end-users.
(By "techniques commonly used by malware", I mean the data harvesting, screenshots, and remote access capabilities exploited by the defendants.)