In June 2014, the CIA and UK's MI5 held a joint workshop to improve the "Weeping Angel" hack, which appears to have specifically targeted Samsung's F8000 series TVs released in 2013.
A "Fake-Off" mode was developed to trick users into thinking their TV was off (by turning off the screen and front LEDs), while still recording voice conversations. Based on what we know about the TV, the hack would have tapped into the microphone located in a TV's accompanying remote.
I've read 'Can I monitor my network for rogue IoT device activity?' which gives some general ideas about how a network could be monitored, but I'm interested in specific ways that I could detect if my TV was infected and transmitting data to the cloud.
Is there any way that I could detect if my TV was recording and transmitting audio to a malicious party?
I'm thinking about anyone who may have developed a similar attack, too, not just the CIA's specific exploit. A problem I can foresee with the general methods in the linked question is that it might be hard to differentiate between general network traffic and malicious traffic from my TV—is there any way I could tell between them easily?
The TV is connected to a Netgear N600 router and I have no special monitoring equipment, but I'm happy to use Wireshark if necessary.