APT28 has utilized harvested credentials to perform lateral movement within the DNC network. The threat actor aimed to maximize access and control over critical systems by leveraging stolen credentials.