The Stanley malware kit uses malicious Chrome extensions to redirect users to phishing pages while the browser URL remains unchanged.