A well-established distributed microgrid could collapse due to potential cyberattacks penetrating into its communication network. This article aims to design a distributed resilient controller to achieve current sharing and voltage regulation in direct current (DC) microgrids under the threat of false data injection attacks, where a common requirement to attach extra communication media is relaxed. In addition, there are no restrictions on predetermining the diffusion of attackers. The stability analysis of the closed-loop system is conducted and the effectiveness of the proposed control scheme is illustrated by experimental examples in a hardware-in-the-loop DC microgrid testbed.