We investigate secure communication over a channel that undergoes two different classes of attacks at the same time: passive eavesdropping and active jamming. This scenario is perfectly modeled by the concept of arbitrarily varying wiretap channels (AVWCs). We derive a full characterization of the secrecy capacity of AVWCs under list decoding. We show that the list secrecy capacity is either equivalent to the correlated random secrecy capacity or zero depending on the order of symmetrizability of the legitimate AVC. Differently from correlated random codes, our coding scheme does not assume any restrictions on the communication between the eavesdropper and the jammer.