$6,000 “Stanley” Toolkit Sold on Russian Forums Fakes Secure URLs in Chrome

Stanley is a newly discovered malware toolkit that, as per its developer, bypasses the Chrome Web Store review process. Disguised as the Notely app, it uses clever website spoofing to steal credentials while keeping legitimate URLs in the address bar.

A new crimeware toolkit named Stanley is currently being sold on Russian-language crime forums, allowing scammers to create fake websites that look identical to the real thing. Data security and analytics specialist Varonis discovered and reported this kit, which first appeared on January 12, 2026. It is being offered by a seller using the alias Стэнли (Stanley) for prices ranging from $2,000 to $6,000.

What is most concerning for the average user is that this toolkit isn’t just a piece of software but a full-featured service. The most expensive version comes with a guarantee that the malicious app will pass the official security checks of the Chrome ...