Scworld Kash Patel's Based Apparel Site Offline After Crypto Malware Attack
Article Content
- •Based Apparel's website was compromised, distributing malware targeting crypto wallets.
- •The attack specifically affected macOS users, prompting them to execute harmful terminal commands.
- •MetaMask flagged the site for malicious activity, warning users of potential asset theft.
The Based Apparel website, co-founded by FBI Director Kash Patel, was taken offline after being compromised by malware designed to steal cryptocurrency wallet credentials from macOS users. The malware, identified as an infostealer, prompted users to execute terminal commands that allowed attackers to harvest sensitive data, including session tokens and browser credentials. The attack specifically targeted over 200 crypto wallet browser extensions, raising significant security concerns. MetaMask issued warnings about potential malicious transactions related to the site. The website was reported to be offline on May 22, 2026, following alerts from security researchers and users on social media. The extent of the losses and the number of affected users remain unclear, with no specific cryptocurrency protocols implicated. This incident follows a previous security breach linked to Patel in March 2026, involving an email hack attributed to Iranian actors.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (11)
Following this threat?
Track ClickFix and Based Apparel in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Active Exploitation of Siemens Software Center Vulnerability in ClickFix Campaign Siemens has confirmed that a DLL side-loading vulnerability (CVE-2026-110936) in Siemens Software Center is actively being exploited in malware attacks. The vulnerability allows attackers to execute malicious code by placing a specially crafted DLL in a directory searched by the application. Siemens first disclosed…
Cybercriminals Exploit ChatGPT Custom GPTs for ClickFix RAT Attacks A new ClickFix campaign has been discovered that exploits ChatGPT Custom GPTs to impersonate legitimate products, luring users into executing malicious code. Cybersecurity firm Huntress reported that at least 40 users have been infected, with two confirmed incidents linked to Custom GPT instances. The attackers…