Other than having to retake the test, what other penalties are there?
I suspect IRCC is not in the business of cyber security intelligence so, at worst, you appear to them as not being in Canada, when in fact you are (a fact they could verify by other means). Or, at best, nothing happens and...