Attackers gained control of Across's official domain through a social engineering attack on its domain registrar, Namecheap.