Indeed. Just recently a company got fooled into hiring a remote employee who turned out a North Korean hacker:

https://arstechnica.com/tech-policy/2024/07/us-security-firm...