Yeah it’s a real tactic but not hacking most of time, usually it’s stuff like open subdomain systems, expired or forgotten subdomains, or misconfigurations people take over, so they get authority from the main domain and rank fast, but it’s not stable and can get removed anytime.