InsureOTP Kit is a previously undocumented phishing kit identified by CTM360, designed specifically for insurance-themed phishing operations. It provides live session management, real-time data collection, backend administration, and multiple data exfiltration methods, including Telegram Bot integrations and direct backend API communication. The kit enables real-time OTP interception and account takeover during the victim's active session.