Home / Technology / Malware Attack Hits Ex-Official's Apparel Site
Malware Attack Hits Ex-Official's Apparel Site
22 May
Summary
- Malicious malware attack targets macOS users via BasedApparel.com.
- Fake Cloudflare page tricks users into running hidden commands.
- Payload flagged by 27 antivirus engines as Trojan and infostealer.
An online apparel store, BasedApparel.com, linked to former FBI official Kash Patel, has been found to be distributing malware targeting macOS users. The site, co-created by Patel, employed a "Clickfix" style attack that presented visitors with a deceptive Cloudflare-branded page. This fake page warned of "Unusual Web Traffic" and instructed users to verify they were human by copying and pasting a command into their Mac's Terminal application.
Unbeknownst to users, clicking the "Copy" button on the deceptive page actually copied an obfuscated malicious command. Executing this command in Terminal could lead to the theft of sensitive data, including browser credentials and cryptocurrency wallet information, which would then be archived and sent to a remote server. A security researcher flagged the threat, and analysis revealed the payload was recognized as a Trojan and infostealer by 27 antivirus engines.
While BasedApparel.com has not yet responded to requests for comment, the incident suggests a compromise of the website, potentially through tampered admin panels or vulnerable plugins. Apple has recently implemented safeguards in macOS Tahoe 26.4 to alert users when attempting to run copied commands in Terminal, mitigating some of the risk associated with such attacks.
