A pair of researchers presented proof-of-concept code that could change the dynamic of the financially motivated attack landscape. The attack, dubbed Project Mayhem, could enable an attacker to divert funds from a company s accounting and financial systems without immediate detection. The key to the attack is to stealthily modify entries in the accounting system to commit fraud, i.e., transfer funds to an outside account. The duo said their motivation in developing this attack was to help penetration testers efforts in examining the defenses of these systems.
Source: https://threatpost.com/new-accounting-system-hack-could-cause-mayhem-120712/77291/