Emails from the Duolingo owl are usually an annoyance at worst. But cybercriminals now have their hands on your email address and Duolingo data, so can send you highly targeted emails to lure you into phishing traps.