They link here [0] for more details, which might be less geo-intercepted.

[0] https://securelist.com/gitvenom-campaign/115694/

Yeah, was also thinking is Kaspersky pro-Putin or in exile? Might have read something at some point, but have forgotten.