Hackers tied to Russia's FSB targeted diplomats and ministers with phishing emails, exploiting WhatsApp QR codes to seize accounts in a bold cyberattack.