Phishers now keeping track of state?

[Notice for our international readers]

Yesterday I received this phishing mail:

To: ****@********
Date: Wed, 19 Mar 2008 10:49:50 +0000
From: Wachovia Connection banking Consumer support <news@wachovia.com>
Subject: Wachovia Connection Web application security

Dear Wachovia Connection Bank Customer:
Due to the emergency situation with our server room and the closing of
the New Orleans Branch of the Federal Reserve, Wachovia Connection
Bank is presently unable to process wire transfers. Therefore we are
asking that customers please refrain from initiating wire transfer
requests through Wachovia Connection until further notice. All wires
initiated before 12:30 PM CDT will be processed; however, there may be significant delays in doing so.

IMPORTANT: All customers must validate personal information.

(...)

and today, a followup message reminding me:

To: ****@********
Date: Thu, 20 Mar 2008 10:56:17 +0000
From: Wachovia Connection banking Consumer support <techsupport@wachovia.com>
Subject: Wachovia Connection Bank ACH Customers

Dear Wachovia Connection bank account holder,
As part of our security measures, we regularly screen activity in the
Wachovia Connection bank system. We recently contacted you after
noticing an issue on your account. We requested information from you
for the following reason: Our system detected unauthorized use of a
bank server linked to Wachovia Connection bank accounts.
Case ID Number: 8650032-48659
This is a reminder to log in to Wachovia Connection bank as soon as
possible.

(...)

Nice to see how scammers care about their customers, isn’t it?