The London-based privacy group alleges the UK signals intelligence agency, working with the US National Security Agency, used “unlawful hacking” efforts.