ESET Research identified at least 10 APT groups using exploits for CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065.

https://www.welivesecurity.com/2021/03/10/exchange-servers-under-siege-10-apt-groups/