The biggest threat in using "bogus" or fake tools would be that they are themselves actually tools for someone else to access you. Its a very plausible and likely scenario.
Being more advanced than a signature-based system. Its ability to detect lateral movement and not just remediate but prevent attacks before they start.
