Kash Patel-Linked Apparel Store Offline After Malware Distribution

Opening

Based Apparel, an online store linked to FBI Director Kash Patel, went offline Friday after security researchers flagged the site for distributing ClickFix wallet-draining malware. macOS visitors to the website were being prompted to install the malware by copying and pasting a command into their system's terminal, which put session tokens, browser data, and crypto wallets at risk via an infostealer. MetaMask flagged the website as "potentially deceptive," displaying a warning pop-up to users that identified "malicious transactions resulting in stolen assets" as among the potential risks. The website now displays a message stating "the store will be back online shortly—bolder than ever."

Malware Detection and Reproduction

The attack was reproduced by PCMag; however, Decrypt was unable to reproduce it because Based Apparel's website had already gone offline. The infostealer malware is designed to silently extract sensitive data from users' devices. Infostealer malware has historical precedent dating back as early as 2006. Two months prior to this incident, the FBI said it was investigating several PC games on the Steam platform that installed similar malicious software.

Website Traffic and Ownership

Based Apparel typically receives an estimated 33,600 visits monthly, according to ahrefs. One of its top pages showcases a camouflage hoodie. The venture is owned by Patel and Andrew Ollis, who serves on the board of the Kash Foundation as CEO, according to The Guardian. Kash Foundation visitors, through one of the nonprofit's primary menus, are directed to Based Apparel.

Organizational Affiliation Clarification

Although the Kash Foundation was founded by Patel, he is no longer affiliated in any capacity, according to the organization's website. A disclosure also makes clear that the Kash Foundation is not associated with government agencies, including the FBI.

Prior Crypto-Related Incidents

Patel has been the subject of crypto-related incidents before. After Iranian hackers leaked his personal email and burner username, a series of Patel-themed meme coins followed.