^There are enough liars in Indian IT companies. Some security companies do hire people who have made malware previously since the experience helps the development.
Secondly, given the competitive nature of the industry, you either work for a single company or you don't work. You cannot work freelance for 3 companies to create malware.
Thirdly, it is easy to make a virus these days. I'm not going to tell you how to do it, but take it from me when I say it is easy.
In India, we exaggerate every small thing related to computers, like calling simple break-ins using exploits as some kind of major "hack".