An apparel store tied to FBI Director Kash Patel briefly disappeared from the web on Friday after reports that its site was distributing wallet‑draining malware.
What happened
- Visitors on macOS were reportedly prompted to paste a Terminal command to install a utility called “ClickFix.” Security researchers and users on X warned the command installed an infostealer that can harvest browser session tokens, cookies, and cryptocurrency wallet credentials—exposing funds to theft.
- MetaMask flagged the site as “potentially deceptive.” Users attempting to visit received a warning that the domain could lead to “malicious transactions resulting in stolen assets.”
- PCMag reproduced the attack; Decrypt did not. At the time the site went offline, Based Apparel displayed a message saying the “store will be back online shortly—bolder than ever.”
Why it matters
Infostealer malware quietly exfiltrates sensitive data and has been leveraged against crypto users for years, with variants traced back to at least 2006. The FBI earlier this year said it was investigating several Steam PC games that installed similar malicious software—underscoring how everyday downloads and prompted commands can be weaponized to drain wallets.
Scope and ownership
- It’s unclear whether the Based Apparel incident caused significant losses. The site normally receives roughly 33,600 visits per month, per ahrefs, and one of its most visited product pages features a camouflage hoodie.
- Based Apparel is a venture owned by Kash Patel and Andrew Ollis. Ollis is listed as CEO and serves on the board of the Kash Foundation. The foundation’s site links visitors to Based Apparel from a main menu item, but its disclosures state Patel is no longer affiliated with the nonprofit and that the Kash Foundation has no ties to government agencies, including the FBI.
Background on Patel
Kash Patel, now FBI director, has repeatedly spoken about the bureau’s growing use of AI to combat cybercrime. He has also been the target of earlier online incidents: after Iranian hackers leaked one of his personal emails and a burner username, several Patel‑themed meme coins emerged.
The investigation and remediation status remain unclear; Based Apparel’s temporary outage suggests the operators are taking the site down while addressing the issue.
Read more AI-generated news on: undefined/news
