I wrote a tiny change of the `org-attach' function that allows to attach a file from a URL (downloading it in the process). I chose a binding of 'C-c C-a u' for this. I've updated the Texi documentation as well.

Regards,

Wojtek