If you or anyone operators a botnet attack, it's illegal, and mostly punishable by law. While every Botnet attack has a different purpose, a lot of data is stolen, and a lot of time and work is hampered. Imagine a hospital not able to register for incoming patients because the system has been taken down by a botnet attack.