The Treasury Department announced sanctions Friday against a prominent Shanghai-listed Chinese network security company for its role in a global attack affecting at least 260,000 internet-connected devices, roughly half of which were located in the United States.