The victim site looks at where these newly created back links are coming from, and then reports them to the Google disavow tool and disavow the lot of them. That is the mechanism for dealing with the intent of those links.

After a few cases like this, a long list of multiple disavowed domains/networks/fingerprints, where are these negative links going to come from? This anti-SEO tactic you outline can only be used a handful of times before it becomes useless.