New attacks on graphics processors endanger user privacy. Web browsers use GPUs to render graphics on desktops, laptops, and smart phones. GPUs are also used to accelerate applications on the cloud and data centers. GPUs are usually programmed using application programming interfaces, or APIs, such as OpenGL. OpenGL is accessible by any application on a desktop with user-level privileges. Since desktop or laptop machines by default come with the graphics libraries and drivers installed, the attack can be implemented easily using graphics APIs. Source 3v.
The worst part about this is that you cannot even detect those spies as easily as you think. Some people just download an anti-virus software and think they are safe from hardware attacks, hope there is some sort of mechanism against this for the new year.