Their techniques made use of out-of-office replies and automatic responses during the 2020 holiday season, researchers report.