PUP Fangs - Browser Shortcut Argument Injection

Ibrahim Saud@tektrix

•updated Jun 22, 2026•0•0•3

Detects when a browser desktop shortcut (.lnk file) is modified by a setup or update executable, which could indicate a Potentially Unwanted Program (PUP) injecting malicious arguments or redirecting the browser to an attacker-controlled gateway upon launch.