Based Apparel’s website went offline after distributing malware that stole crypto wallet data from macOS users via deceptive terminal commands.
An apparel store linked to FBI Director Kash Patel took its website offline Friday after reports surfaced that it distributed “ClickFix” malware targeting macOS users. The malware tricked visitors into running terminal commands, exposing session tokens, browser data, and cryptocurrency wallets to theft via an infostealer.
MetaMask flagged the site as potentially deceptive, warning users of “malicious transactions resulting in stolen assets.” The attack was confirmed by third-party testers, though the site now displays a message claiming it will return soon. This marks the second crypto-related incident involving Patel, following a prior data leak.
Infostealer malware, which silently extracts sensitive data, has been a persistent threat since at least 2006. The FBI recently investigated similar malware in PC games on the Steam platform.