Which of the following tactics uses malicious code to redirect users' web traffic?

Spear-phishing is a targeted social engineering attack directed at specific individuals or organizations using personalized emails, not malicious code that redirects web traffic.

Phishing uses fraudulent emails or messages to trick users into voluntarily visiting malicious websites or providing credentials, rather than using malicious code to redirect web traffic automatically.

Spimming (spam over instant messaging) is the practice of sending unsolicited messages over instant messaging platforms, not a technique that uses malicious code to redirect web traffic.

Pharming is an attack that uses malicious code to modify DNS settings, host files, or DNS servers to silently redirect users' web traffic to fraudulent websites. Unlike phishing, which relies on tricking users into clicking links, pharming operates at the infrastructure level by corrupting the name resolution process, so users are redirected even when they type the correct URL. This makes it particularly dangerous because it requires no user interaction beyond normal web browsing.