"The country's Internet service providers were running a malicious piece of code that was recording users' login information when they went to sites like Facebook."

Right, for all those pre-21st century sites that still don't enforce SSL for authorization. It should be a standard, not a counter-measure.