Attackers claim control of Dread onion address after private key leak