The new Penguin may demote links from pages it found spammy.
It works on crawl and it triggers on spam based factors.
What is considered spammy is decided by RankBrain, G's artificial intelligence powering Penguin, based on certain signals, including those that webmasters sent them via disavow...