Because a couple dudes with small arms can't be effective by attacking the Russian military or police forces head-on. Instead they choose to attack soft targets and maximize the social disruption and impact by terrorizing citizens.

I would normally say it seems like a convenient false flag if they could pin it on Ukraine or something, but it sounds like several sources have confirmed ISIS is claiming responsibility.