Comment by fmobus

You don't have to intercept a shipment and tamper at large scale with incredible speed if you're posing as the supplier.

That's what I believe happened. Specially likely if you consider that terrorist orgs are not exactly putting RFPs or doing large orders at legit vendors. That gives you the chance to pose as a helpful supplier that operates on the down low and accepts cash on delivery, etc.