A popular, low-cost KVM device was compromised out of the box with a hidden microphone and pre-installed hacking tools.