Kim Jong-nam, the estranged half-brother of North Korea's leader, was assassinated with the banned VX nerve agent at a Kuala Lumpur airport in 2017, in an operation widely attributed to North Korea
Where the evidence lands: SupportedThat Kim Jong-nam was deliberately killed with the nerve agent VX at Kuala Lumpur airport, that the two women who applied it were recruited and directed as unwitting or semi-witting instruments by North Korean operatives, and, in the wider political reading, that the assassination was planned and ordered at a high level within the North Korean state to eliminate a potential rival to Kim Jong Un's rule.
Believed by: That Kim Jong-nam was assassinated with VX is the settled account of Malaysian forensic authorities, the OPCW, and the world's press. The attribution of the operation to the North Korean state is the mainstream conclusion of South Korea, the United States, and most analysts, and is reported here as a strongly supported, government-attributed allegation rather than a courtroom finding, since no trial ever adjudicated who ordered it.
The full story
What is documented
Start with what the cameras and the toxicology settle. On the morning of 13 February 2017, in the departure hall of the budget terminal at Kuala Lumpur International Airport, two women approached a heavyset traveler, wiped a substance across his face, and walked off in different directions. The man told airport staff he had been grabbed from behind and felt unwell. Within roughly twenty minutes he was dead, collapsing as he was moved toward a hospital. The victim was Kim Jong-nam, the eldest son of the late North Korean leader Kim Jong Il and the estranged half-brother of the current leader, Kim Jong Un.
Eleven days later, Malaysia's police chief announced that a toxicology report had identified the substance on Kim's face as VX, one of the most lethal nerve agents ever synthesized and a weapon banned under the 1993 Chemical Weapons Convention. Malaysia's foreign ministry formally named the agent, and the Organisation for the Prohibition of Chemical Weapons, which administers the treaty, called its use reprehensible and contrary to international norms. A colorless, oily liquid that kills in tiny quantities absorbed through the skin, VX had been used to murder a man in the middle of a crowded international airport.
So the question this file weighs is not whether Kim Jong-nam was assassinated with a banned chemical weapon. Forensic authorities and an international treaty body confirm that he was. The question is who organized it, how much the two women knew, and how far the evidence reaches toward the North Korean state that so many governments hold responsible.
The two women and the prank-show defense
The people who physically applied the agent were quickly identified from CCTV and arrested. They were Siti Aisyah, an Indonesian, and Doan Thi Huong, a Vietnamese. Prosecutors said each had carried one component of the nerve agent and smeared it onto Kim's face as he waited to check in. On its face this was a murder with two visible perpetrators caught on camera.
But both women told the same striking story. They said they had been recruited by men they understood to be producing a hidden-camera prank show, that they had rehearsed similar face-wiping stunts on strangers for small payments, and that they believed the airport encounter was another gag rather than an assassination. Their defense was that they were unwitting instruments, handed a lethal substance without being told what it was.
That account shaped the legal outcome. In March 2019 Malaysian prosecutors dropped the murder charge against Aisyah, who flew home to Indonesia; weeks later Huong pleaded guilty to a lesser charge of causing hurt by a dangerous weapon and was released in May 2019. In the end no one was convicted of murder. Whatever the two women understood, the prosecutions treated them less as the authors of the plot than as its final, expendable tools.
Two visible perpetrators, caught on camera, and yet no murder conviction: the state that supplied the weapon was never in the dock.
The North Korean hand, reported as attribution
The layer that turns a bizarre airport killing into a matter of statecraft is the role of North Korea, and it deserves to be stated carefully, as attribution by governments and investigators rather than as the site's own accusation. Malaysian prosecutors said the two women had conspired with four North Korean men who supplied and prepared the agent, coached the women, and left Malaysia on flights routed toward Pyongyangwithin hours of the attack. Those suspects were never surrendered, and Malaysia's reach ended at its borders.
Beyond the operational suspects, the wider attribution to the North Korean state came from serious quarters. South Korea's government and intelligence service described a state-directed operation. In November 2017 the United States relisted North Korea as a state sponsor of terrorism, citing the Kim Jong-nam killing among its grounds and treating the assassination as an act of state terror. Analysts at institutions such as RAND read the killing as consistent with a leadership removing a potential rival claimant, and the Arms Control Association and others framed it as the first known use of a chemical-weapon nerve agent to assassinate an individual.
All of that is a strong, convergent case, and this file reports it as such. What it does not do is convert attribution into a courtroom verdict. No trial established who inside the North Korean government ordered the operation, and so the specific claim that a named leader personally directed it is reported here as a widely held, government and analyst attribution grounded in motive and method, not as a fact the site asserts on its own authority.
Pyongyang's denial, weighed and rejected
North Korea's response was total denial layered with counter-accusation. Pyongyang rejected the finding that VX had been used, calling it absurd and unscientific; it disputed that the dead man was even Kim Jong-nam; and it offered an alternative account that he had died of a heart attack, portraying the whole affair as a fabrication by the United States and South Korea to smear the country. It also resisted Malaysia's demand for next-of-kin DNA and fought a protracted diplomatic battle over the return of the body.
That denial cannot be squared with the record. The CCTV footage shows the face-wiping attack; the toxicology identified VX; the OPCWconfirmed the agent; and the North Korean suspects' flight from Malaysia is itself hard to explain innocently. A natural-causes story does not account for two women applying a nerve agent to a man's face in a terminal, nor for the presence of atropine, a nerve-agent antidote, reported to have been found in Kim's own bag. The denial is the interested statement of the party most implicated, and the documented evidence runs against it.
The diplomatic crisis that followed, with expelled ambassadors and citizens briefly barred from leaving on both sides, ended in a negotiated handover of the body to North Korea. That resolution settled a standoff; it did not vindicate the denial. Reporting the denial fairly means stating it plainly and then measuring it against the forensic and visual record, which does not support it.
“Reprehensible and completely contrary to the legal norms and standards of the international community.” That was the treaty body's verdict on the weapon, not a rumor.
Where the evidence lands
Keep the layers apart. The event is documented: Kim Jong-nam was killed with the banned nerve agent VX in a Kuala Lumpur airport terminal on 13 February 2017, a conclusion resting on Malaysian forensic findings and the OPCW's confirmation of the agent. On that core, the record is firm, which is why this file is rated Substantiated.
The attribution of the operation to the North Korean state is strongly supported and widely shared: by Malaysian prosecutors who named four fleeing North Korean suspects, by South Korea's government, by the United States when it relisted North Korea as a sponsor of terrorism, and by mainstream analysis. This file reports that attribution as serious and convergent, while noting the honest limit that no court ever adjudicated who ordered the killing. The two women left without murder convictions and the North Korean suspects were never tried, so the exact chain of command remains a matter of assessment and inference rather than judicial finding.
The right posture is to state what the record supports and to attribute, rather than assert, the part it does not close. Kim Jong-nam was assassinated with a chemical weapon in a public place; governments and investigators overwhelmingly attribute the operation to North Korea; and the precise question of who at the top gave the order was never proven in a courtroom. Holding those three statements together is not hedging. It is the difference between reporting a documented assassination and its widely attributed authorship, and making an accusation against a named individual that no legal process ever established.
What's still unexplained
- No court ever determined who ordered or directed the assassination. Both women left without murder convictions and the North Korean suspects were never tried, so the specific chain of command, however strongly attributed to the North Korean state, was never adjudicated and remains a matter of intelligence assessment and inference rather than judicial finding.
- How much the two women knew is still debated. Their defense, that they believed they were filming a prank show, was accepted enough to unwind the murder charges, but exactly what they understood they were doing, and how they were recruited and handled, was never fully resolved on the record.
- The whereabouts and status of the fugitive suspects are unclear. The North Korean men identified by investigators reached Pyongyang and were beyond Malaysia's reach; whether any faced consequences at home, and what precise roles they played, has never been publicly established.
- Why VX, and how it was handled without killing its carriers, remains a technical puzzle. Reporting noted that Kim was found with atropine, an antidote, in his bag, and analysts have debated how a binary application of such a lethal agent was managed operationally, questions that the aborted prosecutions never had to answer.
Point by point
The claim: Kim Jong-nam was killed by a deliberate attack, not by natural causes or an accident.
What the record shows: This is settled. Airport CCTV captured two women approaching him and wiping his face, he reported the assault to staff moments later, and he died within about twenty minutes. Malaysian authorities treated it as a homicide from the outset, arrested suspects, and built a prosecution around a coordinated attack. North Korea's alternative account, that he died of a heart attack, is contradicted by the forensic findings and by the manner and speed of his collapse.
The claim: The weapon was the nerve agent VX, a banned chemical weapon.
What the record shows: Confirmed by forensic authorities. Malaysia's police chief announced on 24 February 2017 that a toxicology report found VX on Kim's face, and the country's foreign ministry formally identified the agent as VX. The OPCW, the body that administers the Chemical Weapons Convention, described the use of VX in the killing as reprehensible and contrary to international norms. VX is banned under the 1993 Chemical Weapons Convention, which North Korea has never joined.
The claim: The two women who applied the agent were the ones who caused his death.
What the record shows: Physically, yes; their culpability is the contested part. Prosecutors said Siti Aisyah and Doan Thi Huong each carried one component of the agent and wiped it on his face. Both maintained they had been recruited for what they were told was a hidden-camera prank show and did not know they were handling a lethal weapon. Ultimately no court found either woman guilty of murder: the charge against Aisyah was dropped and Huong pleaded to a lesser offense, an outcome consistent with the view that they were used as instruments rather than the authors of the plot.
The claim: North Korean operatives organized the attack and then fled.
What the record shows: This is the account of Malaysian prosecutors and South Korean authorities, and it is well supported though never tested at a murder trial. Investigators said the two women conspired with four North Korean men who supplied the agent and coached them, and who left Malaysia on flights routed toward Pyongyang within hours of the attack. Malaysia issued an arrest warrant for suspects who reached North Korea, and several North Koreans were sought or briefly held. None of the fugitive suspects was ever surrendered or tried, so the operational account rests on investigative findings and reporting rather than on convictions.
The claim: The killing was ordered at the top of the North Korean state.
What the record shows: Widely believed and attributed by governments, but never established in a courtroom. South Korea's intelligence service and government pointed to a state-directed operation; the United States treated the killing as terrorism when it relisted North Korea in November 2017; and analysts noted Kim Jong-nam, as an elder half-brother living abroad, was the kind of figure a paranoid succession might seek to remove. This file reports that high-level attribution as a serious, mainstream allegation resting on motive, method, and the pattern of the operation, and does not assert in its own voice that a named North Korean official personally ordered it, because no judicial process ever made that finding.
The claim: North Korea's denial settles the matter in its favor.
What the record shows: It does not. Pyongyang denied any role, disputed that the dead man was even Kim Jong-nam, rejected the VX finding, and blamed Malaysia and its allies for a plot to defame the country. But the denial is contradicted by the forensic identification of VX, by the CCTV record, by the flight of the North Korean suspects, and by the independent conclusions of Malaysian, South Korean, and US authorities. A blanket denial from an interested party is not evidence of innocence, and the weight of the documented record runs the other way.
The claim: That no one was convicted of murder means the case is unresolved.
What the record shows: That conflates a courtroom outcome with the underlying facts. It is true that both women avoided murder convictions and the North Korean suspects were never in custody, so no verdict names the killers or the planners. But the central facts, that Kim Jong-nam was assassinated with VX in a public terminal, are documented by forensic authorities and international bodies regardless of the prosecutions' collapse. The unresolved layer is the legal accountability and the exact chain of command, not the reality of the attack.
Other readings
Angles that don't fit neatly into the claim or its rebuttal, laid out and weighed, not endorsed.
The state-directed-assassination reading
The dominant interpretation, held by South Korea's government, reflected in the US decision to relist North Korea as a state sponsor of terrorism, and echoed across most expert analysis, is that the operation was planned and ordered at a senior level within the North Korean state to eliminate a potential alternative claimant to the leadership. This is a serious and widely shared conclusion, and it is reported here as exactly that: an attribution grounded in motive, method, and the conduct of the suspects. Because no trial ever ruled on who gave the order, this file presents it as a strongly supported allegation by governments and analysts, not as a fact it establishes in its own voice against any named individual.
The Pyongyang natural-causes denial
North Korea's own account, that its citizen died of a heart attack and that the VX story is a fabrication by hostile powers, is included here only to be weighed and rejected. It is contradicted by the CCTV footage, by the forensic identification of VX by Malaysian authorities and the OPCW, and by the flight of the North Korean suspects. It is reported not as a credible competing theory but as the interested denial of the party most implicated, which the documented evidence does not support.
Timeline
- 2001Kim Jong-nam, then seen as a possible successor to his father Kim Jong Il, is detained in Japan traveling on a forged Dominican passport, reportedly to visit Tokyo Disneyland. The embarrassment is widely cited as one factor in his fall from favor within the ruling family.
- 2011-12Kim Jong Il dies and the youngest son, Kim Jong Un, takes power. Kim Jong-nam, long living abroad in Macau and elsewhere and openly skeptical of the dynastic succession, is left outside the leadership and increasingly isolated.
- 2017-02-13At around 9 a.m. in the departure hall of Kuala Lumpur International Airport's second terminal, two women approach Kim Jong-nam and wipe a substance across his face. He reports the assault to airport staff, is taken to a clinic, and dies within roughly twenty minutes while being moved toward a hospital.
- 2017-02-15Malaysian authorities conduct a post-mortem examination. Police begin arresting suspects, including the Indonesian woman Siti Aisyah and the Vietnamese woman Doan Thi Huong, both captured on airport CCTV, and a Malaysia-based North Korean man; four North Korean suspects are already reported to have flown out of the country on the day of the attack.
- 2017-02-24Malaysia's police chief announces that a toxicology report identified the substance found on Kim Jong-nam's face as VX, a nerve agent. Malaysia's foreign ministry formally names the agent as VX in early March, and the OPCW calls its use reprehensible.
- 2017-03A diplomatic crisis erupts between Malaysia and North Korea. Pyongyang disputes that the victim was Kim Jong-nam, rejects the VX finding as absurd, resists Malaysia's demand for next-of-kin DNA, and the two states expel diplomats and briefly bar each other's citizens from leaving before a negotiated resolution returns the body to North Korea.
- 2017-11-20The United States relists North Korea as a state sponsor of terrorism, having removed it in 2008. US officials cite the Kim Jong-nam killing, among other conduct, as grounds, treating the assassination as an act of state-directed terror.
- 2019-03Malaysian prosecutors drop the murder charge against Siti Aisyah, who is released and returns to Indonesia. Weeks later Doan Thi Huong pleads guilty to a lesser charge of causing hurt by a dangerous weapon and is released in May 2019 after a reduced sentence. No one is ever convicted of murdering Kim Jong-nam.
Supported. The core event is documented beyond serious dispute. On 13 February 2017 two women smeared the nerve agent VX onto the face of Kim Jong-nam, the estranged elder half-brother of North Korean leader Kim Jong Un, in the departure hall of Kuala Lumpur International Airport; he collapsed and died within about twenty minutes. Malaysian police announced that a toxicology report found VX on his face, and the Organisation for the Prohibition of Chemical Weapons confirmed the substance was VX, a chemical weapon banned under the 1993 Chemical Weapons Convention. That much is substantiated. The rated claim's second layer, the state hand behind it, is reported here through attribution rather than the site's own accusation: Malaysian prosecutors said the two women conspired with four North Korean men who fled the country hours after the attack; South Korea's government and much of the international press attributed the operation to North Korea; and in November 2017 the United States relisted North Korea as a state sponsor of terrorism, citing the killing among its reasons. Pyongyang denied any role, disputed the victim's identity, and offered a natural-causes account. No one was ever convicted of murder: the charges against both women were dropped or reduced, and the North Korean suspects were never in custody. This file treats the VX assassination as documented and the specific chain of command inside the North Korean state as attributed by governments and reporting, not proven in a courtroom.
Reviewed by The Conspiratory Editors · Last reviewed July 19, 2026 · How we rate
Sources
- 1.VX Nerve Agent Killed North Korean Leader's Half-Brother Kim Jong Nam Within Minutes, Malaysia Says, NPR (2017)
- 2.VX Use in Assassination “Reprehensible”, Arms Control Association (2017)
- 3.Murder, Missiles, and Messages from North Korea, RAND Corporation (2017)
- 4.VX nerve agent used to kill Kim Jong Nam, police say, CNN (2017)
- 5.Malaysia's VX Incident: Six Months Later, Stimson Center (2017)
- 6.Kim Jong Nam Had Antidote In Bag When He Died In Nerve Agent Attack, NPR (2017)
- 7.Malaysia frees second woman accused of murdering Kim Jong Un's half-brother, France 24 (2019)
- 8.US Puts North Korea Back on State Terrorism Sponsor List, Radio Free Asia (2017)
- 9.Assassination of Kim Jong-nam, Wikipedia
Help us investigate
This is a living case file. If you spot an error or know evidence we missed, tell us, and weigh in on where you land.
Where do you land?
Cast your read on this one.
Comments
Add your take. Comments are read and approved by a human before they appear, so keep it on topic and civil. Please do not accuse named, living people of crimes.