The ars technica article said it was windows focused, but the same techniques should work on other OS. If you had network monitoring how hard would it be to see

The ars technica article said it was windows focused, but the same techniques should work on other OS. If you had network monitoring how hard would it be to see this firmware-kit trying to talk to the internet. Is it sophisticated enough to hide in normal traffic somehow?