Security researchers have presented proof-of-concept code capable of accessing the database driving a Microsoft ERP system and then diverting funds while avoiding immediate detection. Tom Eston and Brett Kimmel of vendor SecureState presented the would-be malware last week at the Black Hat Abu Dhabi conference. A white paper on the mock attack, called Project Mayhem, is available on the SecureState website .