I want to say it's osbot only, because with my one and only new account being used on it was the only account that was hacked. I logged into my main account (on the regular client) and I still have my 800+ mil worth.
If I was keylogged, then he could've taken my main information too. I logged into both my new account and main, but both with differen clients (osbot and regular jagex respectively).