To thwart and extract hacks from anti-virus software companies, the spy agencies reverse engineered software, intercepted email and spied on web traffic. Kaspersky Lab was a major target. The result was potentially a gold mine of exploits.