New malware service guarantees phishing extensions on Chrome web store
"Stanley" is a new malware-as-a-service (MaaS) that offers to publish malicious Chrome extensions to the Chrome Web Store after passing Google's review process.
The project Stanley was dubbed by researchers at end-to-end data security firm Varonis after the seller's alias, who offers simple phishing assaults by intercepting navigation and covering a webpage with an iframe containing the attacker's preferred content.
Malicious Chrome extensions that can cover a webpage with a full-screen iframe carrying phishing content of the attacker's choosing are the focus of the new MaaS solution. Stanley also promotes support for personalized adjustments and silent auto-installation on Chrome, Edge, and Brave browsers.
The most costly of the MaaS's subscription tiers is the Luxe Plan, which ...