Russian group stole credentials and tunneled into the network during a two-month intrusion at a naval shipbuilder.