One sounds scarier, I assume.

The hack is actively run by an entity. The virus is completely autonomous and replicating. Add in the capability of adding zero day capabilities to it, polymorphism, etc and your pretty much fucked