CyberGlossary

Malware

Potentially Unwanted Program (PUP)

Also known as: PUP, Potentially Unwanted Application (PUA)

Definition

Software that is not strictly malicious but installs without clear consent, behaves intrusively, or degrades user experience — for example, bundled toolbars, adware, or aggressive optimizers.

Potentially Unwanted Programs (PUPs), also called Potentially Unwanted Applications (PUAs), are programs that a user might not want even if they nominally agreed during installation. They are commonly delivered through software bundlers that hide opt-out checkboxes, freeware download portals, or trojanized installers. Typical PUP behaviour includes injecting ads, changing browser settings, adding background services, collecting telemetry, or pushing paid "upgrades." Endpoint products classify them under a separate "PUP" or "PUA" category, often with a default block. Defences include downloading software from official sources, reading installation screens carefully, using package managers, and enabling PUA detection in security tooling.

Examples

  • Free PDF readers that bundle browser toolbars and change the default search engine.
  • "System optimizers" that scare users into buying a paid license.

Related terms