Attackers could match phone numbers to Snapchat accounts, researchers say