After slipping through background checks, an activist used a Scandinavian hospital as his base for menacing Tehran’s enemies online.