I believe at some point, the "attacker" is going to run out of funds.
That's the problem with this form of attack, there is not centralized attacked with a limited amount of funds. They got regular newbies to participate in the attack without knowing it. And they will continue to have funds as long as there is a market where they can scam each other with fake things they call "token" or "BRC-whatevers".
Since the token market (ICO scam that started years ago) is not dead, I don't see any reason for this scam market to die either.