Hackers can silently decrypt and extract all usernames, passwords, as well as notes stored by popular password manager KeePass. KeeFarce, the hacking tool is developed by Kiwi hacker Denis Andzakovic and is available on GitHub for free download. Hackers use a technique called DLL (Dynamic Link Library) injection, which allows third-party apps to tamper with the processes of another app by injecting an external DLL code. The injected code then calls an existing KeePass export method to export the contents of a currently open database to a clear-text CSV file.
Source: https://thehackernews.com/2015/11/password-manager-hacked.html