BadSpace Backdoor: New Malware Threat Infecting High-Ranking Websites

**BadSpace** is a sophisticated backdoor delivered via compromised websites and fake Chrome update prompts, using obfuscated JScript downloaders (often disguised with extension spoofing) to deploy a PE32+ DLL that employs RC4-encrypted strings, dynamic API resolution, anti-sandbox checks, persistence via scheduled tasks, and encrypted C2 communications; G DATA links the campaign to SocGholish and provides detailed reverse-engineering and tooling to decode the samples.