“When you can’t tell what’s legitimate, you question everything,” said one cybersecurity expert focused on political campaigns.