Comment by DyslexicAtheist

looks like CIA used fake certificate to sign its malware and make it look like it was legitimate code from Moscow-based antivirus firm Kaspersky Labs. There is an important lesson in attribution for all