An unidentified nation may have developed a "highly complex" surveillance tool that targeted companies and other victims in at least 10 countries, including Russia and Mexico, Symantec Corp. researchers said.