A merchandise website linked to Kash Patel was reportedly compromised and used to distribute malware through a fake security verification prompt aimed at Mac users.
According to security researchers, visitors were shown a fake Cloudflare-style verification page that instructed them to copy and paste commands into Terminal.
Once executed, the malware could steal browser credentials, session cookies, saved passwords, crypto wallet data, and other sensitive information.