40/100
Insurance phishing campaigns now hijack accounts in real-time instead of harvesting credentials. No exploit details provided.