Yes, DDoS attacks are very illegal. Does not mean people can't try and profit from it. There is Murder for Hire, there are thieves who will steal something for someone else... There are many illegal things people sell services to. And there are ways many people look or acquire such services in order to make it happen.
Just remember, there will always be people who will work on the underside as well as above board.