Are there any examples of these kinds of adversarial patterns that don't look like noise? While it is pretty easy to add noise to another image, it isn't exact

Are there any examples of these kinds of adversarial patterns that don't look like noise? While it is pretty easy to add noise to another image, it isn't exactly easy to do it to a real object. The noise wouldn't remain the same as you change perspective with respect to the sign, which would likely change its effectiveness.