A Chinese hacking group hacked the account of a Microsoft engineer, giving it access to a cryptographic key the group later used to break into U.S. government accounts.