Kapersky denies it, but has never offered any proof.

All other Russian cybersecurity firms work directly with the Kremlin, hard to think that they got an exception.