HypurrFi warned users not to access its domain or app after a suspected hijack, saying social channels stay secure for now.