CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

July 25, 2026 · The Hacker News · Severity: LOW

CTM360 research reveals that insurance-focused phishing has evolved from credential harvesting to real-time account hijacking. Attackers now synchronize their activity with victims in real-time, authenticating against legitimate insurance portals as victims unknowingly complete the login process, all within a single browsing session. This represents a shift from the traditional model of harvesting credentials for later use, requiring organizations to understand the infrastructure, techniques, and operational workflows behind these attacks rather than just identifying malicious websites.