As @nakashimae points out, Kaspersky doesn't have to directly or knowingly give data to the Russian government for this whole scheme to work.
Russia can get the data through ISPs subject to its domestic surveillance regime.
https://www.washingtonpost.com/world/national-security/israel-hacked-kaspersky-then-tipped-the-nsa-that-its-tools-had-been-breached/2017/10/10/d48ce774-aa95-11e7-850e-2bdd1236be5d_story.html …pic.twitter.com/nhGRiWdBXy