If the seeder is malicious, there's no need to attack SHA1 at all. The seeder can't control which peers get which versions of any identical-SHA blocks — your target peer may share the bad block — so it seems easier to just upload the malicious content to everyone.
Since there's some control over the original hash value, executing step (4) is not exactly a preimage attack, it should be a bit easier.