Many of them can be done remotely, as has been done at Pwn20wn for several years on OSX. But to actually create a weaponized attack that can get on a lot of ma

Many of them can be done remotely, as has been done at Pwn20wn for several years on OSX. But to actually create a weaponized attack that can get on a lot of machines requires a fair bit of work. If you're going to do that, it's probably worth going the extra mile and attacking a much larger installed user base. But, what's even easier is just doing malware that the user installs. You can write it in a fraction of the time, and you probably get similar infection rates.