May 22, 2026

Feds, fits, and fake pop-ups

FBI director's Based Apparel site has been spotted hosting a 'ClickFix' attack

FBI boss-linked merch site got hacked, and the comments went straight to national-embarrassment mode

TLDR: A clothing website linked to FBI director Kash Patel was reportedly hacked to show a fake security check that could trick Mac users into infecting their own computers. Commenters split between explaining the mix-up and roasting the situation as a perfect symbol of national clown-show energy.

The internet had a field day after PCMag reported that BasedApparel.com, a clothing site tied to FBI director Kash Patel, was caught showing visitors a fake “are you human?” page that tried to trick Mac users into pasting a dangerous command into Apple’s built-in command tool. In plain English: a merch store connected to America’s top federal law-enforcement official was allegedly serving up a malware trap, and commenters instantly treated it like satire come to life.

The strongest reaction was pure disbelief. One commenter summed up the mood with, “we do not live in a serious country,” which became the unofficial theme of the whole discussion. Another had to jump in and decode the story for confused readers, stressing that the key point is not that Patel himself launched malware, but that the site appears to have been compromised by hackers. Even so, that distinction did not stop the mockery. The joke of the day was the ultra-dry “Thank you Based God,” a meme-sized reaction that turned the whole mess into a cursed internet punchline.

There was also a side quest of genuine curiosity: one reader asked why the attack seemed focused on Chrome-style browsers and crypto wallets, showing that beneath the dunking, people were also trying to understand how the scam worked. But the real drama was the symbolism. A site linked to the FBI director getting popped by a basic fake verification trick? For commenters, that wasn’t just a security story — it was an accidental comedy sketch about trust, competence, and online chaos.

Key Points

  • PCMag reported that BasedApparel.com displayed a ClickFix-style social engineering attack targeting macOS users.
  • The fake prompt impersonated Cloudflare and instructed users to open Terminal and run a copied command.
  • The copied text was actually an obfuscated command that decoded and fetched a shell script from a hacker-controlled domain.
  • The recovered payload was flagged by VirusTotal and 27 antivirus engines as a Trojan/infostealer.
  • The article says the incident suggests some portion of BasedApparel.com was compromised and notes Apple added Terminal paste protections in macOS Tahoe 26.4.

Hottest takes

"Thank you Based God" — NDlurker
"we do not live in a serious country" — Group_B
"The website BasedApparel.com was hacked" — analogpixel
Made with <3 by @siedrix and @shesho from CDMX. Powered by Forge&Hive.