A tunisian citizen here. I wanted to add that this kind of attacks was not limited to Facebook. GMail, Yahoo mail and Live mail were also affected. I've checked

A tunisian citizen here. I wanted to add that this kind of attacks was not limited to Facebook. GMail, Yahoo mail and Live mail were also affected. I've checked the source code of their login pages if served over HTTP and they contained a similar JS snippet.