Team known as Cold River created fake login pages and emailed scientists in bid to get to their passwords; unclear if effort was successful