Kucoin Across Domain Hijacked via Social Engineering Attack
Article Content
- •Across's domain was hijacked via social engineering targeting Namecheap.
- •The phishing site was flagged and taken offline within 15 minutes of the attack.
- •Affected users will be fully compensated, and services will remain suspended until security is confirmed.
On November 11, 2026, Across reported that its official website domain was hijacked through a social engineering attack targeting Namecheap, the domain registrar. The attack occurred at approximately 02:45 Beijing time, and Across took action within 15 minutes upon receiving an alert. SEAL911 flagged the compromised domain as a phishing site, and Cloudflare removed its DNS records, rendering the phishing page inaccessible. Users who visited the site before it was fully blocked may have been affected, although API and third-party integration users were not impacted. Across has committed to compensating affected users and will keep its frontend and API services offline until domain security is assured. The company is investigating the incident and plans to release a post-incident review. As of now, there has been no response from Namecheap regarding the incident.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Namecheap in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What actions should affected users take?
Is the phishing site still active?
What is the current status of Across's services?
Continue Reading
Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has…