New Malware Toolkit Sends Users to Malicious Websites While the URL Stays the Same

Cybersecuritynews •Tushar Subhra Dutta • January 26, 2026

Browser attacks have become far more dangerous and organized than before. A new threat called Stanley, discovered in January 2026, shows just how serious the problem has become. This malware-as-a-service toolkit, priced between $2,000 and $6,000, does something particularly deceptive: it displays fake websites to users while the URL bar keeps showing the legitimate address. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malware Toolkit 'Stanley' Redirects Users to Fake Sites While Keeping Legit URLs A new malware toolkit named Stanley has been discovered, allowing cybercriminals to redirect users to malicious websites while the legitimate URL remains visible in the browser's address bar. Sold on Russian cybercrime forums for $2,000 to $6,000, it includes features that guarantee it will pass Google’s Chrome Web Store review process. This sophisticated method poses significant risks to users by deceiving them into believing they are on safe sites. 2 sources 31

New Malware Toolkit Sends Users to Malicious Websites While the URL Stays the Same

The full story

Extracted Entities

Attack Types (2)

Malware (1)