You don't even need to attach it, other placements are sufficient as well. An example of how an attack can be performed: <https://github.com/shoyo/acoustic-keylogger>

Room bugged = keyboard keylogged