Cyber attacks are emerging threats in the Internet of Things applications, and power systems are typical cyber attack targets. As one of the most essential operation functions, frequency control is threatened by cyber intrusions, and the existing centralized control mode cannot effectively address cyber risks. In this study, a new distributed cyber-attack-tolerant frequency control scheme is designed. The distributed control mode also serves as a convenient tool for attack identification. The designed cyber-attack-tolerant frequency controller adopts the idea of passive fault attenuation, thus simplifying the design procedure. With the aid of graph theory and consensus techniques, distributed integral based and model predictive control (MPC) based controllers are designed. Compared with the integral type, the MPC-based controller can simultaneously improve the dynamic responses and the tolerance ability under attack. The proposed controller is validated via an IEEE benchmark system, and the effectiveness of its application in actual power systems is verified.