Given that https://www.scientificamerican.com/article/how-cia-fake-vacc... happened as well, this allegation is sadly unsurprising and probably true.
Can Kaspersky Lab sue the CIA / the US government for hurting their reputation / business in this manner?