If somebody went to the expense of developing a bios implant to target you and your exact micromodel of computer, just give up. Hand yourself over to Mossad now, and get it all over with.

What does this have to do with Linux?

So first thing, an open port isn’t a bad thing most of the time. And a malware infection doesn’t need open ports, nor does modern malware try to open ports.

How did they check for these open ports? Did they log in the router and check? Run a scan from an external service?

The most common explanation for unknown open ports on a router in a home network will be a feature called “universal plug and play” or UPnP for short. This allows IOT devices to ask the router for a port to be opened, and by default most home routers will do just that. Devices like security cameras etc often do that so you can access the video from a phone or something. Games also sometimes use UPnP to open ports for multiplayer.

It’s considered good security practice to disable UPnP as a lot of devices don’t really protect the services they expose through UPnP; but that still doesn’t make open ports an indication of malware.

On the subject of games, is there anyone in the house that might try to host a game server? Even something as simple as minecraft doesn’t need any additional software and a Google search for how “friends can’t connect to Minecraft game” will show instructions on how to set up port forwarding etc.

Honestly, id just reinstall windows, check the router for port forwarding, change the admin password on the router, and call it a day.

Then, keep an eye on it and see if the situation improves