$6,000 “Stanley” Toolkit Sold on Russian Forums Fakes Secure URLs in Chrome

Stanley is a commercial crimeware toolkit sold on Russian-language forums that enables attackers to create malicious Chrome extensions (notably 'Notely') which present fake login overlays while the browser address bar displays the real domain, harvest credentials and browsing data, track victims via IP-based IDs, and maintain persistent command-and-control connectivity; Varonis discovered and reported the campaign and the toolkit claims to bypass Chrome Web Store review.