https://notes.ethereum.org/@vbuterin/single_slot_finality
> If 51% of validators start censoring, the victims and users can coordinate on a minority soft fork where they build on each other’s blocks and ignore the attacker. On the minority soft fork, the attacker’s deposits would lose millions of ETH to an inactivity leak, and after a few weeks the chain resumes finalizing.
It seems that this could easily be turned around: if enough malicious validators coordinate, they can create a soft fork that burns every honest validator’s stake until the malicious validators have an ever increasing supermajority.
New victims who aren’t validators could try to become validators to fight back, but the colluding validators can just ignore those proposed transactions.