6 ms·
FBI director's Based Apparel site has been spotted hosting a 'ClickFix' attack
- NDlurker 5mo agoThank you Based God
- ray_v 5mo agoWhat next? The trump phone shipping Chinese malware. Unthinkable!
- jmward01 5mo agoIt wouldn't be Chinese. It would be Russian.
- wmf 5mo agoWhy not both?
- dylan604 5mo agoTo what point? Do we actually think Trump would use a Trump phone? Otherwise, they'd just be getting data on die hard MAGA types that have nothing to do with anything juicy
- anigbrowl 5mo agoHaving 600k extremely credulous people at your beck and call is a tempting target for any powerful actor.
- kibwen 5mo agoTo paraphrase Hickam's dictum, a phone can have as many sources of malware as it damn well pleases.
- Paracompact 5mo agoThe topicality of this deep-cut joke is incredible.
- Georgelemental 5mo agoAmazes me that, after the events of the past 3 years, so many people still think Russia is the major foreign influence on our politics.
- dralley 5mo agoThe existence of other influences does not diminish the fact that Trump is enamored with Putin (and most "strong man" dictators generally, but Putin in particular) and it does impact his foreign policy decisions and those of his administration (Hegseth straight up canceled weapons shipments to Ukraine for 2 weeks in the aftermath of the Oval Office meeting thinking it would please the boss).
- Georgelemental 5mo agoTrump is currently quite mad at Putin because Putin refused to accept Trump's terms. They are not friends, and never have been. Meanwhile, there's another foreign leader that Trump has decided to start a war on behalf of—but the leadership of the other American party loves that foreign leader just as much as Trump does, so their loyal media outlets downplay it and distract with the fake Russia nonsense.
- dralley 5mo agoAnd yet, that hasn't translatd into additional support for Ukraine. In fact, Russian oil sanctions are lifted for the second month in a row, and Congress Republicans haven't put a Russian sanctions bill on the table because Trump doesn't want one.
- Georgelemental 5mo ago> Russian oil sanctions are lifted for the second month in a row Yes, because of aforementioned war Trump chose to start on behalf of aforementioned genocidal other foreign leader. Do you understand the difference between: - Imposing heavy sanctions on a foreign leader and his nation, and giving extensive support to the military forces actively fighting them—but not going quite as far as some would like; versus - Giving tens of billions of dollars, plus large quantities of irreplaceable military hardware, in support to a nation and its military; having very regular friendly discussions with its leader, and inviting him often to visit in person; commanding your own troops to fight and die on his behalf; and torching the global economy and your own political prospects for his benefit ?
- tdeck 5mo agoDon't be ridiculous, it would be Israeli.
- zombot 5mo agoThey make the best, no doubt, but would the Trump phone have the best of anything?
- BoorishBears 5mo agoPatel's site was just dropping sauce: overdose of sauce
- mjmas 5mo ago> The attack suggests a hacker compromised some portion of BasedApparel.com
- analogpixel 5mo agoFor people that can't grok the title and the article like me: - BasedApparel.com is a website owned by a person that happens to be the FBI director now. (he owned it before he became the director if it matters) - The website BasedApparel.com was hacked and the hackers added a malicious click here to verify you are human section that tried to have you download a malicious payload if you were on macos.
- gensym 5mo agoSo it's not where you buy those shirts that say "Female Body Inspector?"
- deleted 5mo ago[deleted]
- bdcravens 5mo ago> he owned it before he became the director if it matters All the more reason that those who "serve" in the government should be required to divest of their business interests. The traffic such a site would get due to the tribalism prevalent in US politics makes it a fat target, and potentially a national security threat.
- wheelerwj 5mo agoIm a big fan of divesting in these scenarios but i dont know how that would help in this scenario specifically. His current role and his previous ownership made the site a target, but it would be a target regardless of who owns it currently.
- Nevermark 5mo agoIt is the mix of high-security high-visibility national impact with organizations that are completely unequipped to operate in that arena. > it would be a target regardless of who owns it currently. The commonality of attacks makes it more important to eliminate distracting dependencies for critical leaders. Not less. There is a reason top security clearances have requirements no normal organization could make on their employers. Lack of loose vectors is even more important for leaders.
- Group_B 5mo agoAnd once again, another prime example that we do not live in a serious country
- newscracker 5mo ago> The attack seems to work by spanning various instructions that if run through macOS’s Terminal utility could steal stored credentials from Chromium-based browsers along with data from cryptocurrency wallets, placing them into a zip archive then sent to a hacker-controlled domain. What is it about Chromium based browsers that this attack narrows down to? Is it something technical in the ease of stealing information or just the imagined market share by the attackers? As per Cloudflare’s statistics browser share on macOS [1], it seems like Google Chrome users are a little less than two thirds of the total user base. But Safari still holds one third of the user base. Ignoring Safari seems like a poor mistake. [1]: https://radar.cloudflare.com/reports/browser-market-share-2025-q3#id-7-market-share-by-os https://radar.cloudflare.com/reports/browser-market-share-20...
- a_t48 5mo agoI wonder if they aren't using the macOS keychain, while Safari does.
- breve 5mo agoDon't worry about it. Kick back and relax with some Kash Patel branded bourbon: https://www.theatlantic.com/politics/2026/05/kash-patel-fbi-bourbon/687066/ https://www.theatlantic.com/politics/2026/05/kash-patel-fbi-... You'll feel better in no time.
- J-Kuhn 5mo agoOh, I also got one: https://wiki.archlinux.org/index.php?title=Special:CreateAccount&returnto=Main+page https://wiki.archlinux.org/index.php?title=Special:CreateAcc... > To protect the wiki against automated account creation, we kindly ask you to answer the question that appears below (more info): What is the output of: LC_ALL=C pacman -V|sed -r "s#[0-9]+#$(date -u +%m)#g"|base32|head -1 Wait, they really do that...
- alright2565 5mo agoIf you can't understand that command before pasting it in your terminal, then you probably shouldn't be editing the Arch Linux wiki.
- PlasmaPower 5mo agoThey have a similar command for the Arch Linux forum, where beginners are encouraged to ask questions
- spockz 5mo agoMy issue with this style of verification is more that it normalises running commands right in the terminal. Commands that come from place you kind of trust. And poof at some point it will contain some nefarious code. Instead of using a package manager (the curl to bash variant) or running these commands in a container/vm.
- stavros 5mo agoAgreed, this is the first thing I thought of too. Don't teach people to paste unknown commands into their terminal!
- jampekka 5mo agoArch Wiki's core content is instructions of what commands to run right in the terminal.
- __david__ 5mo agoI understand what you’re saying but in this case notice they don’t even mention terminal or command lines. You have to already understand enough context to know what they mean and at that point you should be able to interpret the command itself.
- rbobby 5mo agoThe economy is so bad even the Director of the FBI has a side gig.
- petesergeant 5mo agoI would like to see serious cross-party dialogue on how to avoid ending up in a situation where there’s an FBI director who sells meme clothing. I don’t think it’s unfair to blame cowardice and venality of individual Republican politicians in the face of being primaried, although it definitely needs an asterisk that we don’t know that the left’s Senators and Congressmen would do any better under the same situation.
- incidentist 5mo agoI would say it is up to republicans to do something about the clowns they appointed into high level office, and it’s up to democrats to continue their pattern of not appointing clowns like this into high level office.
- swarnie 5mo agoWhy does the FBI director have a merch store...?
- iamkrazy 5mo agoWould this be a news if it was not owned by FBI director? Do we really expect the FBI director to be responsible for this? He probably outsourced it to some company. This is an inflammatory headline.
- toofy 5mo agoit’s absolutely news worthy. we do (and absolutely should) have higher expectations of the head of one of the most powerful organizations in the world. said organization that goes after malicious actors makes it even more newsworthy.
- iamkrazy 5mo agoSaid organization has nothing to do with this e-commerce website.
- golem14 5mo agoSure, but they do after hackers like the ones attacking Based Apparel. I wouldn't hire a doctor either that has food poisoning every two weeks. I wouldn't hire a security guard that gets held up often.
- Paracompact 5mo agoNever trust a skinny chef.
- josephcsible 5mo agohttps://xkcd.com/932/ https://xkcd.com/932/