“The world is serious enough as it is - people need, and usually appreciate, an unexpected moment of levity in their day,” he says, when quizzed about how recipients might respond to such an OOO. He also confides that he himself has dispensed with auto responses altogether – though not for idealistic reasons. “The last time I tried to set one up, I botched it so badly that somehow it resent every single email in my outbox from the previous year - client emails, firing notices, literally thousands of emails.”
But this absence of basic travel cybersecurity is a problem. Email is the number one threat vector for socially engineered attacks. An automatic reply message not only sends the information to designated contacts, but it also bounces back to people who send phishing emails. Threat actors use any details found in OOO messages to craft targeted social engineering messages. Well-targeted messages build trust that threat actors take advantage of.

Thanks for calling [Company Name]. Our offices are currently closed. Our business hours are from Monday to Friday 9 AM to 8 PM Eastern Time, and Saturday 9 AM to 12 PM Eastern. If you would like to leave a message in our general voice mailbox, press 1. A representative will contact you the following business day. To reach our company directory, press 2. For business hours and directions to our office, press 3. You may also email us at [company email]. For more information about our products and services, please visit us at [website]. To repeat this message, press the * key. 7. Direct Customers to Your Account Login Page
Earlier this year, British comedian Steve Coogan underscored a growing trend to rethink the OOO when he used it not to advertise his own absence, but rather the return to our screens of his blazer-clad alter ego, hapless media personality Alan Partridge. Written in the broadcaster’s inimitable voice, it had stern words for anyone who dared email him: “I’m not in the office so both cannot and will not respond to your email,” it began. “If your email is urgent, perhaps you should have tried calling instead. The very fact you were content to type out your query long hand and settle back to wait for a reply suggests you can wait, even if you’ve put a red exclamation next to your email to make it stand out in my inbox. Won’t wash with me, that.”