My company email got hacked a while ago and sent out fake emails to all my contacts. We had to add additional online security to our email server and email all my clients advising them to not open. it was a disaster. They had hacked the online access to our Outlook. We even have 14 digit encrypted passwords. It was done while I was out of the office for the day, actually driving in my car when all emails were sent out. It was an awful mess. Appologies to anyone who got an email.  

On the email I receive, I agree, the best thing to do is to hover over the incoming email address and if there is anything about it that feels wrong, dump it. Don't open, Don't respond. We think my out of office message may have given the hackers enough info to get into my system while I was out. So be forewarned and prepared.