Via The Telegraph –

” A security expert has found a way to install malicious code on a tiny chip built into Apple laptops which would resist any attempt at removal – even replacing the entire hard disk will not delete it.

The attack, which is being called Thunderstrike, is virtually undetectable and would require an attacker to get access to a machine for mere moments. And because it is new, no security software will even be looking out for it.

Trammell Hudson, who works for New York hedge fund Two Sigma Investments, said that the discovery came about when his employer asked him to look into the security around Apple laptops.”

“Since it is the first OS X firmware bootkit, there is nothing currently scanning for its presence. It controls the system from the very first instruction, which allows it to log keystrokes, including disk encryption keys, place backdoors into the OS X kernel and bypass firmware passwords,” Hudson said.
“It can’t be removed by software since it controls the signing keys and update routines. Reinstallation of OS X won’t remove it. Replacing the SSD won’t remove it since there is nothing stored on the drive.

This sounds like a terrible virus but I doubt anyone has been infected by it yet. Have you? 

Source Telegraph