A government-backed group has gotten access to over two dozen high-profile email accounts with a stealthy hacking tool it developed in 2020.