Which of the following tactics uses malicious code to redirect users' web traffic?

Spimming refers to sending unsolicited messages (spam) over instant messaging platforms, not redirecting web traffic.

Pharming is a cyberattack tactic that redirects legitimate website traffic to a malicious, fraudulent website without the user's knowledge or consent. This redirection is typically achieved by manipulating DNS settings or modifying the hosts file on the victim's computer, often through malicious code, effectively diverting their web traffic.

Phishing is a social engineering technique that uses deceptive communications (e.g., emails) to trick users into revealing sensitive information or downloading malware, but it doesn't primarily involve malicious code to directly redirect web traffic.

Spear-phishing is a highly targeted form of phishing aimed at specific individuals or organizations, and like general phishing, it relies on social engineering rather than direct web traffic redirection via malicious code.