A randomized gradient-free attack on ReLU networks