The perpetrators used fraudulent paperwork to pose as legitimate carriers, making off with the distillery's flagship single malt.