New malware service guarantees phishing extensions on Chrome web store

Varonis researchers identified a new malware-as-a-service named 'Stanley' that offers malicious Chrome extensions capable of silently auto-installing, overlaying full-screen phishing iframes while preserving the legitimate address bar, performing persistent C2 polling, geo-targeting victims, and promising support to publish extensions to the Chrome Web Store—raising distribution and phishing risks at scale.