They aren't alternatives: spam is network IO bound, mining is CPU bound. The smart bot herder would do both.

The main danger is that the target notices that their machine is using 100% CPU and removes the bot. It is easier to notice CPU load (heat, fan noise, prominent position in Task Manager) than network load.