YES, IT IS POSSIBLE FOR MALWARE TO JUMP AN AIR GAP: “The researchers, Michael Hanspach and Michael Goetz, were able to transmit data between air-gapped laptops up to 19.7 meters (more than 60 feet) apart at a rate of approximately 20 bits per second by using acoustic methods originally developed for underwater communications. In other words, the computers communicated via their built-in speakers and microphones by transmitting inaudible acoustic waves.” That’s a low data rate, but still. . . .

It’s also an argument — along with various forms of more-typical spyware — for hardware switches to disable cameras, speakers, and microphones.