Should be in the message_macros template. Search for the message-attachments class. In that <section> tag you could include a new <h4> or <strong> with your message. That way it would only show up if an attachment is added.
You may also want to include some kind of conditional xf:if you only show if the user group was unregistered/guest.