APT 33 was observed using password-spraying attacks against a wide range of organizations. Microsoft said it detected successful intrusions in a small number of cases and that when APT 33 did gain access to networks, it exfiltrated information from victim servers.