Finding out your competitor is using blackhat techniques to your disadvantage is frustrating.
When this happens, you have two options:
Carry on using whitehat strategies and wait for Google to catch up with them.
Speed up the process by reporting their dodgy links in Google Search Console.