'Stanley' Toolkit Turns Chrome Into Undetectable Phishing Vector

Varonis researchers uncovered "Stanley," a malware-as-a-service toolkit sold on a Russian cybercrime forum that builds malicious Chrome extensions (disguised as a note-taking extension) to overlay spoofed login pages in the browser while preserving the legitimate URL, enabling credential theft and evasion of typical protective checks; the toolkit includes a C2 panel, configurable spoofing, and claims of guaranteed Chrome Web Store approval, presenting a significant browser-based threat vector for organizations.