Google launched a new Google Earth web feature built around its Nano Banana 2 image generator, allowing users to create artificial satellite-style imagery inside the mapping platform. The company promoted the capability as a way to reimagine places in Google Earth, but the rollout was short-lived after users and researchers rapidly tested the system and demonstrated that it could generate convincing false overhead images of events that never happened.
Reports showed the tool could produce photorealistic depictions of sensitive scenarios, including disasters, conflict damage, and geopolitical incidents, while some of the feature's guardrails were reportedly easy to bypass. Google said it rolled back the feature after generated imagery appeared to violate company policies and that it would work on stronger safeguards; critics said provenance controls such as SynthID watermarks were not enough because screenshots could be shared without reliable detection, raising risks for journalism, crisis reporting, and trust in visual evidence.

Track how attackers are adapting to this technology.
3 events from the most recent confirmed update back to the earliest known activity.
Google enabled a new Google Earth web feature on July 30, 2026 that used the Nano Banana 2 image generator to create artificial satellite-style images from real satellite imagery. The feature was made available to all users.
Google said it was rolling back the Google Earth feature after users shared generated imagery that appeared to violate its policies. The company said it would implement stronger guardrails rather than stating the feature was permanently discontinued.
Within hours of the launch, researchers and news outlets demonstrated that the feature could produce convincing photorealistic satellite-style images of events that never happened, including disasters and geopolitical incidents. Reported tests by Henk van Ess, NPR, and BBC also showed that basic guardrails could be bypassed or failed to block sensitive prompts.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
8 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcemalwarebytes.com
Open sourcetechtimes.com
Open sourcenpr.org
Open sourcebbc.com
Open sourcedigitaldigging.org
Open sourceblog.google
Open sourcemalwarebytes.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.