Journalists from Bellingcat, which uncovered Russian agents who poisoned spy, say hackers tried to steal ProtonMail credentials, urge Switzerland to investigate