When the patterns were put next to another item, such as a banana, many neural networks saw a toaster instead. The team said the method could be used to "attack" image recognition systems.