MtGox victims are still waiting patiently to reclaim their money that they lost when the Japanese bitcoin exchange collapsed in 2014. However, their ordeal seems to be far from over as now they are flooded with spam messages that claim to help them recover their funds.

Last month, Japanese court-appointed Trustee Nobuaki Kobayashi announced that all claims to date from MtGox creditors have been reviewed and that the status of all claims has been determined. Kobayashi stated that 24,750 creditors have filed claims to date and that the claimants will soon be able to learn the status of their claim. Cryptocurrency exchange Kraken said that it will help distribute the $91 million in bitcoin to MtGox victims.

Following this announcement, Cybersecurity firm Cyren identified a new round of spam messages claiming to have originated from Kraken.

The Register reported that once the messages are opened, users are redirected to a Google Docs page that claims to provide an update on the status of Bitcoin recovery claims. The document is, in fact, an executable file that delivers a Windows Trojan (W32/Trojan5.NRB). Cyren says that the Trojan then searches for any local Bitcoin wallets it can steal from.

Customers who seek the status of their claim are advised not to open or click on any unsolicited and untrusted emails. They should check the status only through https://claims.mtgox.com/.