Hacktool LaZagne can leverage the APIs of IPC mechanism D-Bus to fetch credentials. We reveal how this is done using observed malware campaigns.