The malicious software can trick experts into thinking patients are sick, say cyber-security researchers.