Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

FBI director's Based Apparel site has been spotted hosting a 'ClickFix' attack

pcmag.com

Post reply on HN
Print view View original

11–20 of 66 posts

Re: FBI director's Based Apparel site has been spotted hosting a 'ClickFix' attack

#11

Post by morkalork »

analogpixel wrote: post #5

For people that can't grok the title and the article like me: - BasedApparel.com is a website owned by a person that happens to be the FBI director now. (he owned it before he became the director if it matters) - The website BasedApparel.com was hacked and the hackers added a malicious click here to verify you are human section that tried to have you download a malicious payload if you were on macos.

>happens to be

This is not normal, other (decent) countries are not like this

Re: FBI director's Based Apparel site has been spotted hosting a 'ClickFix' attack

#12

Post by mzajc »

analogpixel wrote: post #5

For people that can't grok the title and the article like me: - BasedApparel.com is a website owned by a person that happens to be the FBI director now. (he owned it before he became the director if it matters) - The website BasedApparel.com was hacked and the hackers added a malicious click here to verify you are human section that tried to have you download a malicious payload if you were on macos.

> if you were on macos

Did they only target macOS? The article mentions macOS a lot, but AFAIK this attack changes the instructions based on the User-Agent. I've seen the exact page with instructions for Windows and PowerShell before.

Re: FBI director's Based Apparel site has been spotted hosting a 'ClickFix' attack

#13

Post by dylan604 »

wmf wrote: post #9
jmward01 wrote: post #7

Earlier quoted context omitted.

It wouldn't be Chinese. It would be Russian.

Why not both?

To what point? Do we actually think Trump would use a Trump phone? Otherwise, they'd just be getting data on die hard MAGA types that have nothing to do with anything juicy

Re: FBI director's Based Apparel site has been spotted hosting a 'ClickFix' attack

#14

Post by newscracker »

> The attack seems to work by spanning various instructions that if run through macOS’s Terminal utility could steal stored credentials from Chromium-based browsers along with data from cryptocurrency wallets, placing them into a zip archive then sent to a hacker-controlled domain.

What is it about Chromium based browsers that this attack narrows down to? Is it something technical in the ease of stealing information or just the imagined market share by the attackers? As per Cloudflare’s statistics browser share on macOS [1], it seems like Google Chrome users are a little less than two thirds of the total user base. But Safari still holds one third of the user base. Ignoring Safari seems like a poor mistake.

[1]: https://radar.cloudflare.com/reports/browser-market-share-20...

Re: FBI director's Based Apparel site has been spotted hosting a 'ClickFix' attack

#15

Post by Georgelemental »

jmward01 wrote: post #7
ray_v wrote: post #3

Earlier quoted context omitted.

What next? The trump phone shipping Chinese malware. Unthinkable!

It wouldn't be Chinese. It would be Russian.

Amazes me that, after the events of the past 3 years, so many people still think Russia is the major foreign influence on our politics.

Re: FBI director's Based Apparel site has been spotted hosting a 'ClickFix' attack

#17

Post by gensym »

analogpixel wrote: post #5

For people that can't grok the title and the article like me: - BasedApparel.com is a website owned by a person that happens to be the FBI director now. (he owned it before he became the director if it matters) - The website BasedApparel.com was hacked and the hackers added a malicious click here to verify you are human section that tried to have you download a malicious payload if you were on macos.

So it's not where you buy those shirts that say "Female Body Inspector?"

Re: FBI director's Based Apparel site has been spotted hosting a 'ClickFix' attack

#18

Post by dralley »

Georgelemental wrote: post #15
jmward01 wrote: post #7

Earlier quoted context omitted.

It wouldn't be Chinese. It would be Russian.

Amazes me that, after the events of the past 3 years, so many people still think Russia is the major foreign influence on our politics.

The existence of other influences does not diminish the fact that Trump is enamored with Putin (and most "strong man" dictators generally, but Putin in particular) and it does impact his foreign policy decisions and those of his administration (Hegseth straight up canceled weapons shipments to Ukraine for 2 weeks in the aftermath of the Oval Office meeting thinking it would please the boss).
Post reply on HN