2017 ODNI Memo on Kaspersky Labs

A blog comment argues that U.S. intelligence concerns about Kaspersky center on its malware sample repository and the visibility of its network traffic, rather than its source code. Citing anecdotes of NSA/TAO malware and sensitive data being uploaded to Kaspersky, it contends that intelligence agencies typically monitor traffic from upstream routers rather than infiltrating vendors directly, framing the issue as part of broader SIGINT practices and geopolitical positioning.