Cybersecurity nerd here, have talked to many platform and financial company CISO’s, security teams and recruiters over the past few years.
Fake interviewees are pretty rampant. We’re getting to the point where presenting yourself in-person to a government representative, agency or a private attestation company will be part of the onboarding process. At this point it looks like it’ll be iris scans.
In the US it’s even an issue in-person with H1B’s where they get interviewed and hired online, then someone else shows up.
Also the fact that insider threats are almost never budgeted for, and so many companies blanket-approve access to systems like logging systems, customer support systems, source code, etc - means attackers don’t even need to get hired into a very important role to get the data they want.