Accounts created specifically to harass. But they aren't saying how:

https://blog.twitter.com/2017/an-update-on-safety

...and no one writing it up seems to know either