Social media firm's cyber-espionage investigations chief says some malicious code used in 'well-resourced operation' was developed by company with ties to Revolutionary Guards