Kash Patel's 'BasedApparel' website is apparently hosting ClickFix malware
Kash Patel's 'BasedApparel' website has been found to host ClickFix malware targeting macOS users. The malware was disguised as a Cloudflare CAPTCHA check, tricking victims into executing malicious commands. Following the discovery, the website has been taken offline for improvements and further investigation.
- ▪The ClickFix malware targets only macOS users and is disguised as a CAPTCHA verification.
- ▪Victims were misled into pasting malicious commands into their Terminal, leading to malware installation.
- ▪The Based Apparel website has been taken offline after the malware disclosure, showing a message about making improvements.
Opening excerpt (first ~120 words) tap to expand
Pro Security Kash Patel's 'BasedApparel' website is apparently hosting ClickFix malware News By Sead Fadilpašić published 26 May 2026 The malware apparently only targets macOS users When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. (Image credit: Future) Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Researcher finds Based Apparel site serving a macOS ClickFix infostealer disguised as a Cloudflare CAPTCHA checkVictims were tricked into pasting malicious Applescript commands in Terminal, with VirusTotal flagging the malware as a commodity Trojan/infostealerThe site, built on…
Excerpt limited to ~120 words for fair-use compliance. The full article is at TechRadar.