When Russia's intelligence agencies obtained some of the National Security Agency's secrets about its own cyberweapons, it appeared to do so by manipulating a virus protection program sold by Kaspersky, a Russian firm.