This network was trained using an adversarial approach. What that means is that a second network that does exactly what you say was used to train the first.

They kept training until they created images that could reliably fool the discriminator. A more powerful discriminator would just be used to create better fakes.