Yes, using DFA attacks without authorization is considered illegal and unethical, as it involves breaking into secure systems and potentially accessing confidential data. It's primarily a tool for research and security testing within legal and ethical boundaries.