Cybersecurity researchers from Facebook and a university have exposed a vast network of activity from surveillance-for-hire firms from India to Israel that they claim has used hacking tools and hundreds of fake personas to monitor journalists, dissidents and politicians around the world.