It's a difficult challenge because Steemit needs to remain uncensored which opens up opportunities for abuse. I'm thinking maybe it could start with witnesses compiling lists of obvious spam accounts and Steemit Inc undelegating the initial Steem Power to those accounts to severely limit their bandwidth. Maybe the signup process could be improved as well to prevent these fake accounts from being created in the first place unless they spend their own money.