1. An apparatus comprising one or more processors, and one or more memories including computer program code, the one or more memories and the computer program code configured to, with the one or more processors, cause the apparatus at least to perform: obtain image data, which determines a displayed image of a user interface; obtain association data included in the image data, wherein the association data comprises action instructions which are performed when the user interface is manipulated by a user; identify the image data as corresponding to an identified image among known reference images, wherein, in order to identify the image data as corresponding to an identified image among known reference images, the apparatus is caused to search for image patterns within the image data, wherein the searching for image patterns within the image data is searching for patterns in the displayed image of the user interface displayed on a screen for the user with computer vision technology and the image patterns are images or portions of images that are known to the user by their purpose or context; and set reputation data of the association data as suspicious, if the association data does not match acceptable associations for the identified image.