They probably just use the tried and true method of exploiting flaws in the server, then helpfully offering to fix it. Repeat until trust builds and eventually a fed agent is the Sr technical lead with access to everything.