A cybersecurity firm has revealed details of a hacking operation that exposed EU diplomats’ private messages.