How “omnipotent” hackers tied to NSA hid for 14 years—and were found at last