We took a brief look at the set of bots attacking @ProtonVPN identified by @DanielGallagher (nice work there, btw).
There are at least 645 accounts in the set. All of them follow the same naming scheme: [female name] + [2 digit number] + [letter] + [2 digit number] + [letter]. The vast majority of the profile pics are female, presumably stolen from elsewhere on the Internet. 
These accounts are old - created within a 38 minute span on August 6th, 2012. This set of accounts was created long before they became highly active, and not all are active yet - of 645 accounts, only 95 have tweeted.
The theme appears to be to sow distrust for NordVPN and ProtonVPN by pushing the Google doc shown here. So far, only 35 of the accounts have gotten in on the action. The pattern seems to be that they use an app to automatically post Quran verses until they join the campaign.
Here are the combined tweet schedules for the 95 accounts that have tweeted so far, broken dow by tweet content and by app/service used. The VPN-related tweets are posted via the website; most of the rest are from automation tools (the website tweets may be automated as well).
