Have you told actual Cisco? They have an interest in mitigating it and may have more luck or contacts, or just more people to throw at it. (A lot of companies

Have you told actual Cisco? They have an interest in mitigating it and may have more luck or contacts, or just more people to throw at it. (A lot of companies have a phishing@ address or similar for this kind of thing.)