Hackers who hijacked security software also used it to infiltrate hi-tech firms, say Cisco researchers.