MacBook takes screenshots without user input
According to Trend MICRO (September 12, 2016) the symptoms you describe do confirm that this could be a virus or intruder:

Infection Channel: Downloaded from the Internet, Dropped by other malware

This backdoor enables the attacker to steal a range of information, including screenshots, audio, and keylogs. It can also execute commands and communicate using encrypted data.