Russian Hackers Stole NSA Tools from Contractor Who Used Kaspersky Software

Why would he bring classified malware anywhere near an anti-virus? Isn't it the job of AV software to detect and report new cases of malware?