Across Restores Website After Domain Phishing Attack

Across Protocol said it regained control of its website and restored normal operations after an attacker took over its domain and replaced the site with a phishing page. The project said the incident involved social engineering targeting its domain registrar, Namecheap, and that it would compensate affected users.

Across said the attack began at about 18:45 UTC on November 10. The attacker gained control of the domain and redirected visitors to a page intended to deceive them into interacting with malicious content. Across said it was alerted within 15 minutes and shut down the website while working to contain the incident and secure its account.

The project said it worked with security response group SEAL911 and cloud services provider Cloudflare to flag the site as unsafe. Cloudflare later removed the domain’s DNS records, according to accounts of the response. Across also thanked Namecheap founder Richard Kirkendall for helping secure its account and open an investigation.

Some users who visited the fraudulent page may have been affected, Across said. It has not disclosed how many users were affected or confirmed a total loss. Security platform GoPlus estimated losses at about...