The Executable file which tricks user into believing that they are seeing databases of Mt.
Goxs owning company, Tibanne Co. Ltd., is in factTrojan.Win32.CoinStealer.i.
Kaspersky have managed to locate of the C & C server and found it to be in Bulgaria.
source: www.techworm.net