An apparatus, method and computer program product is provided in accordance with embodiments of the disclosure, for identifying a message of interest exchanged between nodes in a network. The apparatus comprising circuitry configured to: receive information of nodes in a network, the information including at least a unique identifier of each node; receive information of messages which have been exchanged between the nodes, the information comprising at least the unique identifier of the nodes related to each exchange of messages; for each node, transform the information of messages which have been exchanged into an individual set of interactions comprising the unique identifiers of nodes the node has exchanged messages with; determine a level of mutual interaction between nodes in the network using the individual set of interactions of each node, wherein a first node has a mutual interaction with a second node when the unique identifier of the second node is contained in the individual set of interactions of the first node and/or the unique identifier of a third node is contained in the individual set of interactions of each of the first and second node; and identify a message as a message of interest when the message is exchanged between nodes having a level of mutual interaction below a predetermined threshold.