It would have to be starting with smaller coins with less marketcap that are easier to mine. Since some people would be scared of running a miner the miner used to start the attack would have to be open source and auditable for people to trust running the program.