On March 23rd 2017, news of the CIA having possibly infesting Mac computers with malware have been released by WikiLeaks.
"DarkSeaSkies" is "an implant that persists in the EFI firmware of an Apple MacBook Air computer" and consists of "DarkMatter", "SeaPea" and "NightSkies", respectively EFI, kernel-space and user-space implants.
Documents on the "Triton" MacOSX malware, its infector "Dark Mallet" and its EFI-persistent version "DerStake" are also included in this release. While the DerStake1.4 manual released today dates to 2013, other Vault 7 documents show that as of 2016 the CIA continues to rely on and update these systems and is working on the production of DerStarke2.0.
Although these infections surely target very few people, there is still little to no documentation regarding this malware, but I am wondering if there is a way to inspect and diagnose this malware (either with "regular" malware troubleshooting software or through Activity Monitor, Terminal, etc).