US and overseas hackers sold access to tools, which were then used to generate harmful content, Microsoft says.