Skip to content
Kash Patel's Based Apparel Site Offline After Crypto Malware Attack

Kash Patel's Based Apparel Site Offline After Crypto Malware Attack

First seen 23 May 2026, 02:25 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •May 24, 2026 at 00:34 UTC
  • •Based Apparel's website was compromised, distributing malware targeting crypto wallets.
  • •The attack specifically affected macOS users, prompting them to execute harmful terminal commands.
  • •MetaMask flagged the site for malicious activity, warning users of potential asset theft.

The Based Apparel website, co-founded by FBI Director Kash Patel, was taken offline after being compromised by malware designed to steal cryptocurrency wallet credentials from macOS users. The malware, identified as an infostealer, prompted users to execute terminal commands that allowed attackers to harvest sensitive data, including session tokens and browser credentials. The attack specifically targeted over 200 crypto wallet browser extensions, raising significant security concerns. MetaMask issued warnings about potential malicious transactions related to the site. The website was reported to be offline on May 22, 2026, following alerts from security researchers and users on social media. The extent of the losses and the number of affected users remain unclear, with no specific cryptocurrency protocols implicated. This incident follows a previous security breach linked to Patel in March 2026, involving an email hack attributed to Iranian actors.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 154d ago How this analysis works

Timeline

2026-03-01
Previous security breach linked to Patel
An email hack attributed to Iranian actors targeted communications related to Kash Patel.
Cryptobriefing
2026-05-22
Based Apparel website taken offline
The site was reported to be offline after security alerts about malware targeting crypto wallets surfaced.
Cryptobriefing
2026-05-22
Malware attack reported
Users were tricked into executing terminal commands that installed infostealer malware on their devices.
Decrypt.Co
2026-05-22
MetaMask issues warning
MetaMask flagged Based Apparel as potentially deceptive, warning users of malicious transactions.
Kucoin

More articles in this cluster (11)

Following this threat?

Track ClickFix and Based Apparel in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed