An undercover Google analyst infiltrated a notorious supply-chain hacking gang