Makes you wonder if American antivirus companies are instructed not to reveal American military malware.

To guard against that you could theoretically scan using a wide range of international antivirus companies. But the problem with that is that the militaries are using the antivirus software themselves as an attack vector. Kaspersky was recently caught stealing American government secrets via its software. It's impossible to know who to trust.