U.S. sanctions expose a shadowy network trading in stolen cyber tools once reserved for American defense.