Comment by tschwimmer

I imagine either:

a) Get hired, collect a paycheck or two while doing the absolute bare minimum (filling out onboarding forms, etc - no real work) and then move on to the next victim company.

or

b) Get hired with the goal of getting access to improperly secured company or user data.

I imagine a) is vastly more common than b).