Which of the following tactics uses malicious code to redirect users' web traffic?

Spimming refers to spam sent over instant messaging platforms and does not involve redirecting web traffic.

Pharming uses malicious code or DNS poisoning to silently redirect a user's web traffic from a legitimate domain to a fraudulent website, even when the user types the correct URL. Unlike phishing, pharming operates at the network or system level, making it harder to detect because the browser appears to navigate normally to the intended destination.

Phishing uses deceptive emails or fake websites to trick users into voluntarily submitting credentials, rather than programmatically redirecting traffic at the DNS or host level.

Spear-phishing is a targeted form of phishing that uses personalized deception to lure specific individuals, not malicious code that silently redirects traffic.