Trezor reveals 66,000 users could face phishing attacks