Kash Patel’s Merch Site Gets Shut Down After It Was Hacked and Infected Visitors With Malware
The merchandise website tied to Kash Patel was abruptly taken offline on Friday after reports surfaced claiming the platform had been compromised by hackers attempting to infect visitors with dangerous malware designed to steal sensitive information.
According to reports first highlighted by Straight Arrow News, the website for Based Apparel appeared to have been hijacked by cybercriminals who allegedly inserted malicious software into the site.
The controversy began Thursday when an X user known as “Debbie” publicly warned that visitors to the website may have been exposed to an “infostealer,” a highly dangerous form of malware commonly used by hackers to steal usernames, passwords, banking details, browser cookies and other sensitive personal data from victims.
Cybersecurity researchers later reportedly examined the suspected malware and concluded that the threat appeared credible enough to raise immediate alarm.
By Friday, the Based Apparel website had gone completely offline.
Neither Patel nor anyone publicly associated with the apparel company responded to requests for comment following the reports.
Multiple outlets indicated that attempts to reach contacts previously linked to Patel and the brand were unsuccessful.
The incident has quickly become another high-profile cybersecurity embarrassment involving MAGA-linked business ventures during an already difficult week for online security tied to Trump-world organizations.
Earlier Friday, Trump Mobile confirmed that customer information had been exposed online following a separate data security lapse.
According to reports surrounding that incident, exposed customer data allegedly included names, email addresses, mailing addresses, phone numbers and order identification numbers belonging to customers who purchased Trump-branded phones and wireless plans.
That exposure reportedly came to light after a cybersecurity researcher notified YouTubers who had purchased Trump Mobile devices that their personal information was publicly accessible online.
While neither breach appears connected to government systems or official federal infrastructure, the timing is especially awkward given Patel’s role as head of the Federal Bureau of Investigation, which regularly investigates cybercrime, ransomware operations and foreign hacking campaigns.
The situation has also fueled criticism online from opponents who argue that public figures advocating tougher cybersecurity and national security measures should ensure their own affiliated business operations maintain proper digital protections, per Tech Crunch.
Infostealer malware has become one of the fastest-growing threats in global cybercrime.
Unlike ransomware attacks that immediately lock down systems, infostealers often operate silently in the background, collecting login credentials, saved passwords, autofill data and financial information without victims realizing they’ve been compromised.
Cybersecurity experts typically warn that users who may have interacted with compromised websites should immediately change passwords, monitor financial accounts and enable multi-factor authentication wherever possible.
At this point, officials have not publicly identified who may have been responsible for the suspected compromise, how long the malware may have been active or whether any visitors were successfully infected before the website was shut down.
The apparent attack also underscores how politically connected brands and public figures increasingly face cybersecurity threats alongside government agencies and major corporations, especially during periods of heightened political tensions and online activism.
For now, the Based Apparel website remains inaccessible as questions continue mounting over how the alleged compromise occurred and whether any customer information may have been exposed during the incident.
Continue Scrolling for the Comments
Leave a Comment