A popular Russian-made anti-virus program is linked to one of the most significant security breaches in years.