Google said the findings were an example of how exploits developed by spyware makers can end up in the hands of “dangerous threat actors.”