A major cyberattack linked to Russian-speaking hackers has compromised the email accounts of UK government officials and critical national infrastructure, with stolen login credentials being sold on dark web forums.