Based Apparel Website Goes Offline Amid Malware Concerns
An apparel store with ties to FBI Director Kash Patel reportedly went offline on Friday following warnings that its website was distributing wallet-draining malware.
Malware Warning
Before the website’s apparent shutdown, visitors using macOS were prompted to install “ClickFix” malware. This involved copying and pasting a command into their system’s terminal, which exposed session tokens, browser data, and cryptocurrency wallets to an infostealer, according to a user on X.
The website was flagged as “potentially deceptive” for users of MetaMask, a self-custodial wallet. When attempting to visit the site, MetaMask users received a warning about potential risks, including “malicious transactions resulting in stolen assets.”
PCMag was able to reproduce the attack. However, Decrypt was unable to do so, as Based Apparel now states that “the store will be back online shortly—bolder than ever.”
Infostealer malware is designed to secretly extract sensitive data from users’ devices. Such malware has been around since at least 2006. Two months ago, the FBI announced it was investigating several PC games on the Steam platform that installed the malicious software.
Website Traffic and Ownership
It remains unclear whether the apparent compromise of Based Apparel resulted in significant losses. According to Ahrefs, the website typically receives an estimated 33,600 visits monthly. One of its top pages features a camouflage hoodie.
The venture is owned by Patel and Andrew Ollis, who serves as CEO on the board of the Kash Foundation, according to The Guardian. Visitors to the Kash Foundation are directed to Based Apparel through one of the nonprofit’s primary menus.
Patel’s Affiliations
While Patel founded the nonprofit, he is no longer affiliated with it in any capacity, according to the organization’s website. A disclosure also clarifies that the Kash Foundation is not associated with government agencies, including the FBI.
The FBI director, who has emphasized the bureau’s increasing use of artificial intelligence to combat malicious actors, has previously been targeted by cryptocurrency-related schemes. Following the leak of his personal email and burner username by Iranian hackers, a series of Patel-themed meme coins emerged.
Leave a Reply