The merchandise website of a political figure was compromised to serve infostealer malware designed to steal user credentials from visitors. The attack vector involved the compromise of the website itself to distribute malicious payloads. No specific software vulnerability, CVSS score, affected versions, or patch information is provided in the article; the primary workaround is to take compromised sites offline, as was done in this incident.
Malware Kash Patel’s merchandise site hacked to distribute malware May 22, 2026 Share By SC Staff As reported by TechCrunch, the merchandise website of FBI Director Kash Patel, Based Apparel, was taken offline on Friday following reports of a cyberattack aimed at infecting visitors with malware. The incident highlights ongoing security vulnerabilities affecting businesses associated with political figures. The attack on Based Apparel, reportedly an attempt to distribute infostealer malware designed to steal user credentials, was first brought to light by a user on X. A security researcher subsequently analyzed the malware. As of Friday morning, the website remained offline. This incident follows another security lapse involving Trump Mobile, which confirmed on Friday that it had exposed customer data, including names, email addresses, mailing addresses, and phone numbers. This exposure was revealed after a researcher alerted YouTubers who had purchased the company's phone. These events underscore the persistent risks of data breaches and malware distribution targeting online platforms, particularly those linked to prominent political figures. Source: TechCrunch SC Staff Related Malware New Linux malware ‘Showboat’ targets Middle East telecom provider SC Staff May 21, 2026 Showboat is believed to be utilized by Chinese-affiliated threat actors, with command-and-control infrastructure linked to Chengdu, China. Malware Teenager from Odesa suspected of running infostealer malware operation SC Staff May 21, 2026 The suspect allegedly used information-stealing malware between 2024 and 2025 to infect user devices, aiming to steal browser sessions and account credentials. Malware Microsoft disrupts Fox Tempest malware-signing service SC Staff May 20, 2026 Fox Tempest operated a platform called signspace[.]cloud, which allowed threat actors to obtain short-lived Microsoft-issued certificates via Artifact Signing. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Adware You can skip this ad in 5 seconds