Chip and pin card details could be hacked by fraudsters while shoppers make purchases, British researchers found.