Attackers targeting unpatched Cisco kit notice malware implant removal, install it again