Heise Security revealed that the Superfish certificate is included in bundled downloads with a number of applications from companies including SAY Media and Lavasoft's Ad-Aware Web Companion. Heise Security (en) a révélé que Superfish et son certificat problématique sont inclus dans des téléchargements groupés de sociétés telles que SAY Media (en) et Ad-Aware.
