But this absence of basic travel cybersecurity is a problem. Email is the number one threat vector for socially engineered attacks. An automatic reply message not only sends the information to designated contacts, but it also bounces back to people who send phishing emails. Threat actors use any details found in OOO messages to craft targeted social engineering messages. Well-targeted messages build trust that threat actors take advantage of.
With a slightly modified email address to mirror yours, they can easily impersonate you using the personal information provided in the OOO message and exploit your absence. Knowing where you are and how long you may be gone can lead to an attempt to initiate a transfer of funds or access confidential data. They might even go the extra step and reference how great their “trip” is going just to make the message appear genuine.

You should use your out of office email whenever you’re going to be away from the office – whether it’s for a day, a week, or even longer.
The information in your after hours greeting should remain concise and essential to the caller's needs. Example: Thank you for calling Cutlas IT Solutions. Our office is currently closed. Regular store hours are 9 am to 7 pm, Monday through Saturday. Please leave a voicemail with your name and phone number for our staff after the beep. 6.