Kash Patel’s ‘BasedApparel’ website apparently hosts ClickFix malware

• Researcher finds Based Apparel site serving a macOS ClickFix infostealer disguised as a Cloudflare CAPTCHA check
• Victims were tricked into entering malicious Applescript commands into Terminal, with VirusTotal flagging the malware as a commodity trojan/infostealer
• The site, built on WordPress/WooCommerce and Ghost CMS, was taken offline after publication, linking the incident to wider Ghost CMS exploitation in ongoing ClickFix campaigns

Based Apparel, an American online clothing company that sells patriotic, conservative and pro-free speech themed products, was apparently compromised and used to serve malware through the ClickFix technique – but only macOS users were targeted.

A researcher with the alias ‘debbie’ revealed his findings to PC Magbefore sharing video evidence of X, after saying she read online about Based Apparel, co-founded by FBI Director Kash Patel, and decided to take a closer look.