Cisco-Trained Hackers Lead Sophisticated Attacks on Cisco Devices | eSecurity Planet

Cisco-Trained Hackers Lead Sophisticated Attacks on Cisco Devices | eSecurity Planet

By Ken Underhill
Publication Date: 2025-12-12 13:21:00

eSecurity Planet content and product recommendations are
editorially independent. We may make money when you click on links
to our partners.
Learn More

Researchers revealed that two Chinese hackers once trained through Cisco’s own education program are now leading one of the most sophisticated global espionage campaigns targeting Cisco devices. 

According to a joint advisory issued by the United States and more than 30 partner nations, the pair now operate companies directly tied to large-scale intrusions into global telecommunications networks.

The pair created “… an expansive intelligence collection effort that included intercepting unencrypted calls and texts, and breaching lawful intercept (CALEA) systems,” said SentinelOne researchers.

When Training Becomes an Attack Vector

The findings highlight a deeply ironic security risk for enterprises and vendors alike: hackers are using their formal Cisco Network Academy training — intended to…