SPECTRALVIPER is a backdoor used by OceanLotus, first documented by Elastic Security Labs in June 2023. It is deployed via DLL side-loading, injects into legitimate processes like OneDrive.Sync.Service.exe, and communicates with C2 servers for host profiling and payload delivery.