Why a collision? Abuse it where it is being used. Infect the chain of certificates that guarantees that the hash you are checking is actually the one you want. Send a million legit documents with bad hashes, so that the forged one looks like another legit one. Infect the library that calculates hashes so that these specific documents have a special hardcoded hash.