What is to stop a malicious attacker only mining 1 transaction per block?
With 5% of mining power you only mine 1 every 20 blocks. "The attacker" would somewhat slow the network down, but they wouldn't stop it from working. He would need to pay for all the harware he is using and he would deliberately loose the potential 0.5 BTC per block in fees.