A company suffering a spam attack would normally choose to deal with it by banning, and optionally prosecuting, the spammers.