Independent investigators found traces of agent activity on wikis, text storage sites, and link shorteners run by 2 universities