2. The attacker sends a transaction only to the victim, all other nodes know nothing about the transaction.
Unless the "victim" is running some non-standard software or have been configured specifically to not broadcast tx's this should not be possible (unless you are saying the attacker owns the victims internet connection).
If the victim broadcasts tx then the attacker receives it.