Hacked government, college sites push malware via fake hacking tools