When viewed, the picture could send the attacker the credentials ... This even includes some bank sites. The attack is simply a mashup of a GIF picture and a JAR (Java applet).

An animated GIF showing how the attack uses a laser to inject spoofed data points to the lidar sensor, which causes it to discard genuine data about an obstacle in front of the sensor.