Yes, and to be more subtle also see e.g. UMBRAGE in Vault7 [1]. CIA has impersonated Kaspersky Labs, and other agencies/countries do the same.

[1] https://wikileaks.org/ciav7p1/