An unknown hacker gained access to FEMA’s network through Citrix Systems’ remote desktop software using compromised credentials.