They're a big business. The trick is hidden in software and controls emissions which require special equipment to detect. Of course they didn't expect to get caught, and if they did get caught they didn't expect to get punished. After all, if Lenovo can keep shipping malware in their laptops, why can't VW ship "malware" in their engine management?