So I asked this question because I had thought that attackers would have a way to identify client software, because surely if 100 different exploits were spammed against a users machine they would notice?
The answers I got suggest that that is not the case, and indeed the most popular malware kits do just spam a wide variety of exploits hoping to get lucky.
My question then, is how does this happen without users being aware? If you spam PDF or Java or media player exploits, surely the users would notice these programs opening up?
I don't even recall advice to users to be on the lookout for such programs randomly starting up when browsing, which would seem like an obvious clue if this is how drive by downloads work.
So, why are spammed exploits not more obvious?