Across: Domain hijacked via social engineering attack, frontend and API services temporarily offline

Odaily reports: Across officially posted on X platform stating that at approximately 18:45 UTC, attackers gained control of the Across domain through a social engineering attack targeting domain registrar Namecheap. The team received alerts within 15 minutes of the attack and took action. SEAL911 subsequently flagged across.to as a phishing site, and Cloudflare assisted in removing the website's DNS records. Currently, across.to has been completely taken offline, and the phishing site is no longer accessible.

Across stated that during the brief window before Cloudflare fully blocked the malicious website, some users who visited across.to may have been affected, but third-party integration services and API users were not impacted. Since domain registrar Namecheap has not yet responded, the team is still unable to fully ensure domain security, and Across frontend and API services will remain suspended until the security issue is resolved. The team will further investigate this domain hijacking incident and publish a post-mortem report once more information is available.