Assume a malicious user wants to make bitcoins through mining. A user can create a transaction (let us assume it is a real transaction) and then create a block containing that single transaction. The malicious user then works on finding the correct nonce for that block before releasing the transaction to the network. Once the value is found, the malicious user releases the transaction. However, he/she already has valid proof of work and has the advantage over all other miners. Therefore, the malicious user can obtain the reward.
Is this scenario possible to happen?