A new phishing toolkit allows for realistic fake Chrome login windows, enhancing phishing attacks targeting single sign-on credentials.