Russia-linked hackers exploited Firefox and Windows bugs in ‘widespread’ hacking campaign